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Readers Data Exchange 

New COMPUTIST readers using 
Apple lis are advised to read this page 
carefully to avoid frustration when at- 
tempting to follow a softkey or entering 
theprograms printed in this issue. 

What is a softkey, anyway? 

Softkey is a term which we coined to describe 
aprocedure thatremoves, or at least circumvents, 
any copy-protection on a particular disk. Once a 
softkey procedure has been performed, the re- 
sulting backup copy can usually be copied by the 
normal copy programs (for example: COPYA, 
on the DOS 3.3 System Master disk). 

Commands and control keys 

Commands which a reader is required to 
perform are set apai| by being in boldface and on 
a separate line. The return key must be pressed 
at the end of every such command unless other- 
wise specified. Control characters are preceeded 
by "Ctrl". An example of both is: 

6ctrlP 

Type 6. Next, place one finger on the Ctrl key 
and then press P. Don't forget to press the retum 
key. 

Other special combinationkeypresses include 
Ctrl reset and open-apple Ctrl reset. In the 
former, press and hold down the Ctrl key then 
press the reset key. In the latter, press and hold 
down both Ctrl and open-apple then press reset. 



Software recommendations 

The Starter Kit contains most of theprograms 
that you need to "Get started". In addition, we 
recommend that you acquire the following: 

• Applesoft program editor such as "Global 
Program line Editor (GPLE)". 

•Assembler such as "Merlin/Big Mac". 

•Bit-copy program such as "Copy 11 Plus", 
"Locksmitfi" or "Essential Data Duplicator". 

•Word-processor (such as AppleWorks). 

•"COPYA", "HD" and "MUFFIN" from the 
DOS 3.3 System Master disk. 

Super lOB and Controllers 

This powerftil deprotection utility (in the 
COMPUTIST Starter Kit) and its various Con- 
trollers are used in many softkeys. (It is abo on 
each Super lOB Collection disk.) 

Reset into the Monitor 

Softkeys occasionally require the user to stop 
the execution of a copy-protected program and 
direcdy enter die Apple's system monitor. Check 
the following list to see what hardware you will 
need to obtain this ability. 

Laser 128: Your ROM includes a forced 
jump to the monitor. Press Ctrl retum reset. 

Apple II-i-, //e, compatibles: 1 ) Place an Inte- 
%es BASIC ROM card in one of the Apple slots. 
2) Use anon-maskable interrupt (NMI) card such 
as Replay or Wildcard. 

Apple n-i-, compatibles: 1) Install an F8 
ROM with a modified reset-vector on the com- 
puter's motherboard as detailied in the "Modified 
ROM's" article (COMPUTIST #6 or Book Of 
Softkeysni)orthe"DualROM's"article(COM- 
PUTIST#19). 

Apple //e. //c: Install amodifiedCD ROM on 
the computer's motherboard that changes the 
open-apple Ctrl reset vector to point to die moni- 
tor. (This will void an Apple He warranty since 
you must open the case to install it,) 

Apple //gs: If you have the 2.xllOM, there is 
a hidden Classic Desk Accessory (CD A) that 
allows you to enter the monitor. In order to install 
the new CDA, you should enter the monitor 
(CALL -151) before running any protected pro- 
grams and press # return . This will tum on two 
hidden CDAs, Memory Peeker aijd Visit Moni- 
tor. Thereafter press openapple Ctrl esc to go to 
the Desk Accessories menu. Select Visit Monitor 
and there you are. Use Ctrl Y to exit 

Recommended literature 

•Apple n Reference Manual (or He, He, etc.) 

•DOS 3.3 & ProDOS manual 

•Beneadi Apple DOS & Beneath Apple Pro- 
EXDS, by Don Worth and Pieter Lechner, from 
(Juality Software 

Typing Applesoft programs 

BASIC programs are printed in a format that 
is designed to minimize errors for readers who 
key in these programs. If you type: 

lOHOMEiREMCLEAR SCREEN 

The LIST will look like: 

10 HOME : REM CLEAR SCREEN 

Applesoft inserts spaces into a program list- 
ing before and after eveiy command word or 
mathematical operator. These spaces don*t pose 
a problon except when they are inside of quotes 
or after a DATA command. There are two types 
of spaces: those that have to be keyed and those 
that don't Spaces that must be typed appesa in 
COMPUTIST as special characters (0). All odier 
spaces are there for easier reading. 

NOTE: If you want your checksums to match, 
only type spaces within quotes or after DATA 
statements if they are shown as (0) charactors. 
SAVE the program at periodic intervals using the 
name given in the article. All characters after a 
REM are not checked by the checksum program 
so typing them is optional. 

Typing Hexdumps 

Machine language programs are printed in 
COMPUTIST as hexdumps, sometimes also as 
source code. 

Hexdumps are the shortest and easiest format 
to type in. You must first enter the monitor: 

CALL -151 

Key in the hexdump exactly as it sq>pears in 
the magazine, ignoring die four-digit checksum 
($ and four digits) at the end of each line. When 
finished, retum to BASIC with: 

3D0G 

BSAVE the program with the filename, ad- 
dress and length parameters given in the article. 

Typing Source Code 

The source code is printed to help explain a 
program's operation. To enter it, you need an 



"Assembler". Most of the source code in older 
issues is in S-C Assembler format If you use a 
different assembler, you will have to translate 
portions of the source code into something your 
assembler will tmderstand. 

Computing checksums 

Checksums are 4-digit hexadecimal numbers 
which tell if you typed a program correcdy and 
help you locate any errors. There are two types of 
checksums: one created by the CHECKBIN pro- 
gram (for machine language programs) and the 
other created by the CHECKSOFT program (for 
BASIC programs). Both are on die "Starter Kit". 

Kyour checksums do not match the published 
checl^ums then die line where the first checksum 
differs is incorrect. 

CHECKSOFT instructions: Install Check- 
soft (BRUN CHECKSOFT) then LOAD your 
program. Press & to get the checksums. Correct 
die program line where the checksimis first dif- 
fCT. 

CHECKBIN instructions: Enter the monitor 
(C ALL - 1 5 1 ), ins tall Checkbin at some out of die 
way place (BRUN CHECKBIN, A$6000), and 
then LOAD your program. Getthe checksums by 
typing the Starting address, a period and the 
Ending address of the file followed by a Ctrl Y . 

SSSS.EEEEctrlY 

Correct the lines where the checksums differ. 

Writing to the RDEX editor 

RDEX (are-decks) stands for: Reader's Data 
Exchange. We print whatyou write. When you 
send in articles, sofdceys, APTs, etc., you are 
submitting them fox free publication in this maga- 
zine. RDEX does nor purchase submissions nor 
do we verify data submitted l^ readers. If you 
discover any errors, please let us know so that we 
may inform our odier readers. 

Remember that your letters or parts of them 
maybeusedinRDEXevenif notaddressedto die 
RDEX editor. Correspondence that gets pub- 
lished may be edited for clarity, grammar and 
space requirements. 

Because of the great number of letters we 
receive and the ej^emeral and unpredictable 
appearance of our volunteer staff, any response 
to your queries will appear only in RDEX, so it 
would be more appropriate for you to present 
technical questions to the readers and ask for 
their responses which will then be placed in the 
Apple-RDEX. 

How to get a free library disk 

Whenever possible, send everything on Ap- 
ple format (5.25" - DOS/ProDOS or 3.5" - Pro- 
DOS) or IBM format (3 J") disks. Odier formats 
are acceptable but diere may be some delay as we 
look for someone to translate it for us. (If you use 
a 5,25" disk, when we print your letter, we will 
return your disk with the current library disk 
copied onto it,) Use whatever text editor you like, 
but tell us which one. Put a label on the disk with 
your name (or pseudonym) and address (if you 
want to receive mail). Don't reformat any pro- 
grams or include them in the text of your letter. 
Send Applesoft programs as normal Applesoft 
files and machine language programs as normal 
binary files. We have programs to convert thon 
to die proper format for printing. If you are 



sending source code files, and you are not using 
die S-C Assembler, send them as normal text 
files. 

When to include a printed letter 

Don't include hardcopy (printout) unless: 

a. You are writing about a bug or other printing 

error. 

b. You are writing to ask for help. 

c. You are answering another readers help re- 
quest 

d. You are writing about your subscription or 
sending an order for back issues or software. 

Bugs, requests for help and answers to re- 
quests for help are bumped to the head of the line 
and go in the very next issue. All other letters are 
printed in the order that we receive them. 

Writing to get help 

When writing to request help, be sure to 
include ALL relevent information. The more 
information you include, the easier it is to find a 
solution. There's an old saying that goes **A 
properly framed question includes 90% of the 
answer". 

How to get mail 

If you are interested in receiving mail from 
other readers, be sure diat we have a current 
address. If you use a pen name and want to 
receive mail, we need to have your address. Our 
readers privacy is important, so we will not print 
your address unless you specifically say too. 

How to write to RDEX authors 

When writing to one of the RDEX authors. 
Write your letter and seal it in an envelope. Put 
your retum address, the audiors name (as it 
appears in RDEX) and the correct postage on the 
envelope. Put diis envelope into another and send 
it to RDEX. We will put the correct address on 
your letter and mail it for you. Check to the right 
of the authors name to see if the author is writing 
from a foreign country and include die proper 
postage. ^^ - 



Help Line 



These readers have volunteered their time to 
help you. Please call only widiin the given time 
frames (corrected for your time zone). No collect 
calls. (You can write anytime!) 
Jack Nlsscl (Disk Protection, 7-lOPM EST) 

(215)365-8160 
Marc Batchelor, 6025 Coker St, Cocoa, FL 

32927 
Rich Etarlp, 824 William Charles Ct #2, Green 

Bay. WI 54304-4018 

The BBS 

(Bulletin Board System) 

Dave Gofordi is the sysop for die Computist 
BBS. The number is: (206) 581-9292. If you 
already have a User ID# and password, sign-on 
using die User ID#. If you are a new user, it may 
take a day or so to validate your new ID# and 
password. 



You have a LEGAL RIGHT 
to an unlocked backup copy 
of your commercial software. 

Our editorial policy is that we do NOT condone software piracy, but we do believe that users 
are entitled to backup commercial disks they have purchased. In addition to the security of a 
backup disk, the removal cfc(^y'protection gives the user the option cf modifying programs to 
meet his or her needs. Furthermore, the copyright laws guarantee your right to such a 
DEPROTECTED backup copy: 

..."It is not an infringement for the owner of a copy of a computer program to make or authorize 
die making of anodier copy or adaptation of that computer program provided: 

1 ) that such a new copy or adi^tation is created as an essential step in die utilization of the computer 
program in conjunction with a machine and that it is used in no other manner, or 

2) that such new copy or adaptation is for archival purposes only and that all archival cq>ies are 
destroyed in die event that continued possession of the computer program should cease to be 
rightful. 

Any exact copies prepared in accordance with the provisions of this section may be leased, sold, 
or otherwise transferred, along with the copy from which such copies were prepared, only as part 
of die lease, sale, or odier transfer of all rights in the program. Adaptations so prepared may be 
transferred only with the authorization of die copyright owner." 

United States Code title 17, §117 ^ 
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Editorial Notes 

Hey, All you Computist writers! I've only got 
enough material for another one and a half issues. 
How about finishing up what your woricing on and 
sending it in to the RDEX editor? And while we're 
on the subject, I 'd like to see some BASIC programs 
submitted. Nothing too complex, just some com- 
mon but useful items. 

In the News — some moldy old flies 

Bugged by household flies? It seems that some- 
one has finally come up with a non-chemical way to 
zap houseflies— with mold. Sprayed fi'om an aero- 
sol container, it is breathed by the flies into their 
bodies, where it multiplies and kills them. And it's 
harmless to mammals, birds and the home owner. 
What's next? 

High-Defmition TV (HDTV) 

Called "Hi- Vision" in Japan, it means wide 200 
inch screens and 1 125 line resolution. InEurope it's 
1250 lines. And in the U.S., well we don't have it 
yet, but they say it's coming. 

The American digital standard should be able to 
surpass the quality of the European and Japanese 
versions of HDTV. Plans are afoot to start HDTV 
broadcasts by 1998 and to phase out regular TV by 
2008. The days of regular TV are numbered and the 
countdown has begun. 

In the meantime, buying a large-screen TV may 
not be such a bad idea. You'll get plenty of use out 
of it before you need to switch over to HDTV 
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Superb ^^ik^lk 

Excellent iklklk^ 

Veiy Good *** 

Good ** 

Fair * 

Poor © 

Bad iT^' 

Defective ^ 

Missing Persons 

Some months ago a caller to the pop- 
ular Rush Lembaugh talk show com- 
plained that computing had become a 
male dominated *club' and seemed to 
imply some conspiracy to exclude wom- 
en. Rush, an avid Mac user and promot- 
er, argued this wasn't so. Since, by his 
own admission, Rush is right 94.5% of 
the time, that was that. *The Host' had 
spoken! 

More recently, one of the eariy morn- 
ing TV news programs did a report on 
"Kids and Computer Games". As usual, 
the piece zeroed in upon users of hand- 
held cartridge machines and the threat- 
ened onset of mindlessness. Standard 
stuff, except that none of the experts 
interviewed seemed especially worried! 
Facing the prospect of a no crisis, low 
pizazz wrap-up, the reporter happened 
to notice that virtually all of the zombie- 
hood candidates were boys. "Where are 
the giri zombies?" she asked. "Ah, well," 
the game seller responded, glancing back 
at shelf upon shelf of glistening car- 
tridges. "We do have a game, named 
*Bart)ie', for girls." 

Obviously, women use computers. 
Just as obviously, very few are *into 
computing'.Usersgroupmeetings,hard- 
ware swap turnouts, program publica- 
tion, even BBS postings — all are over- 
whelmingly male. It looks like a con- 
spiracy; but, it isn't Those 'into com- 
puting' would be pleased as pie to have 
more girls and women join in. 

"Wait just a minute! If the talk show 
caller is typical and 'insiders' are no 
obstacle, what's the problem?"The prob- 
lem is incentive. You have to enjoy 
'computer stuff. Otherwise, it's just 
plain woric. In the '70's a lot of us got 
startedbytinkering withhardware. Since 
the *80's, the usual 'starting off' incen- 
tive has been game playing, (i.e. Real 
games on real computers) With few 
exceptions, men wrote the games, played 
the games, and became THE market for 
still more and better entertainment soft- 
ware. 'What's fun' in computer use is, 
largely, what's fim for males. 

If more games were written for wom- 
en, more women might play games. For 
example, in Origin's "Wing Command- 
er II", female Space Aces would find 
that Col. Devereaux is aromantic French- 
man. An SSI AD&D adventure might 
permit identifying a "lead character" 



and then adjust events according to gen- 
der. (The player can rescue a handsome 
prince, etc..) Since today's designers, 
artists, and scenario writers ARE more 
skilled than ever at 'playing the gender 
card', tailoring major entertainment 
products for women could be very prof- 
itable. 

Computing, the kind that goes be- 
yond merely viewing the computer as a 
business tool, involvestinkering, exper- 
imentation, and playing. Some of this 
(e.g. club meetings, trading ideas with 
friends, and modeming) entails social 
interaction; but, a lot doesn't It's just 
you, your machine, the software, and a 
cup of coffee. Much of the time, any 
distinction between woric and play is 
ambiguous at best Unfortunately, the 
"womanly behavior" stereotype does 
not encourage play, except in social 
situations. It is "okay" for children and 
men to build telescopes, fly RC models, 
AND 'mess around' with computers. 
For women such behavior is "self indul- 
gent" and "immature". Where, ever, have 
you seen a movie/FV mom sit down, 
alone, for a session of computer gam- 
ing? The notion of a 30-year old female 
account executive coming home after a 
rough day on the job, plopping into a 
chair next to her new '486 PC, and 
booting "Pools of Dariaiess" is positive- 
ly alien. 

You can't have it both ways. To "get 
into computing" one must be ready to 
play. Mastering the 'do everything ma- 
chine', enhancing self-expression, ca- 
reer advancement — all of the 'serious 
stuff — will come in time. Women en- 
force the stereotype; it's up to women to 
permit exceptions. For the talk show 
caller the solution may not be easy; but, 
at least, it's simple. Buy a computer, go 
to users group meetings, try some games, 
subscribe to Computist In short, hop in! 
You reaUy don't have to remain among 
the 'missing persons'! 



media with scenario, directions, and 
over- view map all on-diskette. No frills, 
true; but, with three large towns plus 
assorted castles and dungeons, you get 
loads of 'olde Ultima'-style play! This 
means crisp, top-down view hires dis- 
plays showing grasslands, water, woods, 
etc. when traveling outdoors. Inside, 
you see walls, doors, altars, counters, 
signs, etc.. You show up as a partially- 
animated hero figure as do merchants, 
hotel clerks, tavern keepers, guards, ... 
and monsters. A few keyboard inputs 
handle purchases, combats, and move- 
ment on the smooth-scrolling maps. 

Despite its "Ultima"'s III-V 'look'. 
Wraith avoids puzzles, allows 'conver- 
sations' only with barkeepers, seers, etc. 
behind counters, and offers very limited 
choices for improving weapons, armor, 
and magical artifacts. Aside from an 
amulet to detect secret doors and Recall 
to teleport out of tight spots, magic chief- 
ly consists of Fireball plus a few addi- 
tional attack spells. Similarly, all play- 
ers — there's room forthreeon the game 
diskette — begin with the same charac- 
ter: a male human fighterAnage. You 
pick a name; but have no say about 
profession, race, gender, and starting 
attributes. 

On the other hand, new adventure 
gamers are likely to appreciate several 
features aimed at streamlining play. 
These include auto-equipping of pur- 
chased weapons and armor, bows which 
never run out of arrows, low-cost heal- 
ing potions and spells, unlimited carry- 
ing capacity, and automatic Level ad- 
vancement based upon Experience won 
by mashing monsters. 

One automatic feature of which to be 
wary is the Game Save update performed 
whenever you enter "Q"uit OR move to 
a new map (e.g. entera castle, go down 
a stairway, etc.). Should you be killed, 
you are chastised by your patron god- 
dess, zipped backto 'start' inTarot City, 




Wraith 
*• 

$9.95 for 128K Apple He, Ilgs 

NiteOwl 

The once peaceful island of Araithia 
is in serious trouble. A daric force has 
called up ores, ogres, evil mages, hy- 
dras, and other horrors to roam the coun- 
tryside. As leading citizens and lords 
fall beneath the dread influence, even 
the towns and casfles have become cen- 
ters of evil. Now YOU, protector of the 
last temple of Metiria, have been called. 
Find the great weapons, armor, and 
magical items, develop your powers, 
and destroy the Wraith! 

No, the price is correa. Nite Owl's 
map/maze adventure comes on 3.5" 



and divested of any gold. (Other posses- 
sions. Level, and attributes are not af- 
fected.) Naturally, the gold-less game is 
also saved! (Hint: If you have acquired 
a pile of gold and your demise seems 
imminent, REMOVE the game diskette 
from the drive. At worst, you wiU have 
a choice of putting it back in when 
prompted or rebooting and resuming 
play from the last Save.) 

Typical of games by John Cannack, 
Wraith does not fail to introduce some 
nice improvements on the format it bor- 
rows^ Since you are guiding a single 
character, tiie game allows full tactical 
combat on the current map. While the 
graphics and sound closely match those 
of the later Ultima's (except, there's no 
music), 'wide open' combat results in 
more challenging, more entertaining 
encounters which may involve several 



adversaries in a running battie through a 
dungeon's rooms and corridors. Nor do 
'monsters' always attacksimply because 
they are on-screen. (Some monsters see 
better than others, are more aggressive, 
or have guard duties.) However, if you 
attack someone or someTHING, any 
other guards or monsters which see the 
attack will move against you. Another 
deverwrinkle is the lavish useof 'signs' 
to supply hints (e.g. "You're Getting 
Qose!") and to identify dungeon areas, 
like the "Royal Gardens" and a boulder 
"Throwing Range" for giants. 

Spanning several large, well thought 
out mazescapes. Wraith can, thanks to 
the numerous landmarics, beplayed with 
or without mapping. "With" is better in 
the long run. Line-and-box sketches take 
litfle effort and have proved to be great 
time savers. Bugs? Just one is worth 
noting; and, it may be a case of purpose- 
ful deception: look North, not South for 
the "secret base". Overall, expect 30-40 
hours of smooth-running, medixun-dif- 
ficulty challenge. Getting past the 
Wraith's minions is not easy; you CAN 
get killed down there!! But, then, how 
long has it been since you've gotten into 
a for-real Ultima-style adventure? Well, 
that's too long! 

I Want My GS RAM III! 

**** 

$199-$499 (1MB-4MB) 

$139 (2MB) with trade-in, for 
Apple Ilgs 

Applied Engineering 

If M-TV were as good as the (now 
classic) rock hit, I might actually watch 
it. Applied Engmeering's GS RAM III 
IS a real goodie; and I am 'watching' it 
even as I type. Supplied as a compact 4" 
X 2" card, *RAM III can add up to 4MB 
(6MB with special expander) of fiilly 
DMA-compatible memory AND leave 
plenty of roomforacomponentcrammed 
card in Slot 7. Since AE knows you're 
going to ask**Well, what aboutthe 1MB 
memory board I've got now?", you can 
trade in (i.e. dump) your oldie and get a 
price break on the new board with 2MB 
installed. 

GS RAM III uses the new 1MB x 4 
zip package RAMs (e.g. 80 ns. NEC 
D424400VorToshibaTC514402).Each 
is about the size of an old 1 6K RAM IC 
but with *all the littie feets' along one 
edge. A 1MB set, two chips, currentiy 
sells for about $60 from suppliers like 
Quality Computers. When the board is 
installed the zips work like vertical fins 
to draw up air and dissipate heat. (Inci- 
dentally, this feature was pointed out by 
QC's Walker Archer, who noted their 
tech department "likes the 'RAM III 
very much".) At just 50-60 ma. of cur- 
rent per set, even a full 4MB draws far 
less than the 600 ma. allocated to the 
memory expansion slot. 

The AE board package includes a 
manual describing Installation, How to 
add more zips, and RAM Disk use. (The 
manual does NOT, unfortunately, sup- 
ply technical specifications — like chip 
info, current requirements, etc. — or a 
schematic.) You also get the "AW 3 
Expander" diskette plus manual. It has a 
rigorous Memory Test program, Auto- 
Copy utility (e.g. for boot-loading a 
diskette or selected files onto RAM 
Disk), and utilities for adding various 
Enhancements to "Applewoiks" 1.2-3.0. 
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On a Ilgs, the most valuable mods in- 
crease maximum document size and 
number of Data Base records. As might 
be expected, '"Expander" and *Time 
Out" do not 'get along' well. The AE 
enhancements must be made to an un- 
modified copy of "Appleworks"! 

Of the recent upgrades made to our 
"Limited Edition" Woz Ilgs, it is not at 
all easy to say which produced the larger 
gain in computing Power. Zip-GS speed 
is VERY nice, especially for graphics- 
intensive applications. GS-RAM III 
space is absolutely addictive! (Kind of 
like the supply of beakers in a chem lab; 
you end up using and needing whatever 
you've got.) For sure, being able to put 
GSOS on bootable RAM disk (and still 
have plenty of memory left for applica- 
tions) delivers an *order of magnitude' 
boost in user convenience. With RAM 
Disk boot times under 10 seconds, just 
think back to YOUR last multi-applica- 
tion, swap-in/swap-out computing ses- 
sion. OR take a look at memory size 
recommendations for some of the latest 
Ilgs products. What's left to say but "I 
want my GS RAM III, too!"? 

Guest Reviews 

Their Finest Hour: 
The Battle Of Britain 

review by Douglas Hecht 

You rev-up your Supermarine Spit- 
fire Mk I, tune in your radio, and take 
off. It is the Sununer of 1940. You and 
the other RAF pilots in your squad have 
just learned that there is a Luftwaffe 
bomber group converging on one of 
your airfields. The Junker '88A-1 's are 
being escorted by a squadron of Messer- 
schmitt *Bf 109E-3s. Your mission is to 
intercept the enemy force over the En- 
glish Channel and shoot down as many 
aircraft as possible. Off in the distance 
you seethe German formation approach- 
ing the North side of the channel, so you 
climb up to about 10,000 feet and sneak 
up on them from above and behind - get 
the first bomber in your gunsites and 

Fly the RAF's Spitfire or Hawker 
Hurricane Mkl; or try aLuftwaffe fight- 
er or one of four German bombers! 
Lucasfilm's *Battle Of Britain' ($54.95 
for CGA-VGA 640KPQ PC) is packed 
with excitement. Catching a 'schmitt in 
your tracers, you watch it blossom into 
churning smoke and fire. Guiding a 
German bomber, you sit in the Bombar- 
dier's seat looking down to site-in your 
targets; they look great before you drop 
your load of bombs and wipe them out! 
Graphics and control response are just 
outstanding. The AdLib/SB effects will 
blow you away! 

Supplied with user-friendly, photo- 
filled 'collectors quality' manual, 'Bat- 
tle of Britain' includes 72 pre-defined 
missions PLUS the ones you design 
using the Mission Builder. The MB al- 
lows you to create you own objectives 
and battles based on historical data. To 
sum it aU up: there's a lot of fun con- 
tained in that classy-looking box; and, it 
just keeps coming! 

Budokan: The Martial Spirit 

review by Douglas Hecht 

You say that you're 'into' the video 
game Martial Arts experience; but, you 
are tired of having to go to the local 
arcade parlor every night to play. Well, 
maybe you should save those quarters 



and try the Budokan! Once past the 
gates of the 'Tobiko-Ryu Dojo', you 
can enter training halls for 'Karate', the 
art of hand-to-hand combat, 'Kendo', 
the art of sword fighting, 'Nunchaku', 
fighting witiiNunchak's,or'Bo',the art 
of fighting with staffs. Practice alone, 
with an instructor, or take on a second 
player at the 'Free Spar Mat'. Control 
options include KB-only, KB and joy- 
stick, or two joysticks. (I prefer using a 
joystick; it seems to make it easier to 
move your man.) During your training, 
you also have the option to visit the 
'Tobiko-Sensei' to receive words of 
wisdom about tactics and strategy along 
with philosophical guidance. 

When you feel that you have mas- 
tered the arts well enough to hold your 
own in a tournament, it's off to the 
Budokan where you will fight students 
from other Dojo's. They can teach you 
skills not taught by your instructors, so 
long, that is, as you keep winning. There 
are 12 other students that you can fight 
at the tourney; but, you must beat one 
before you can fight the next. 

Electronic Arts' Budokan' combines 
a great challenge with superb graphics. 
I really felt like I was playing a video 
game at my local mall while the package 
was running (including no Game Save). 
The only difference was that I didn't 
have to keep feeding my PC quarters 
every time I lost a match! Starting with 
a "fable" (about some 'Monks', some 
'Grain', and some 'Software'), the man- 
ual describes each move and adds some 
interesting background 'color' on the 
Martial Artstradition. ($49.95 forCGA- 
VGA640KPC) 

Fast Frames, 
Updates, Etc. 

Big-Mem Fix for Appleworks 2.0 

Okay, I know every Ilgs owner is 
supposed to be running "Appleworics 
3.0" or "Appleworks /GS" or "Word 
Perfect /GS". Many do; but, lots of users 
like their multi-patched, 'Time Out"- 
enhanced *2.0's... at least, for 'everyday 
stuff. Bolstered by Zip GS speed and 2 
MB of AE's GS-RAM III, my Apple- 
woiks 2.0 was looking better than ever. 
THEN I popped in another MB and 
(Zonko!):bombsville! Starting from the 
GSOS finder or booting straight from 
ProDOS 1.8, the program makes it into 
the "Pre-loading Applewoiks into lan- 
guage card" message and crashes. 

"Most likely you got some bad RAM 
zips." Logical; but, AE's memory test 
program said: "Uh, uh. Your RAM is 
working fine." Besides, swapping 
around the zips and going back to 2 
MB— everything worked again — 
seemed to nail the culprit as memory 
Size. Possibly, the program has trouble 
dealing with ANY memory larger than 
2.25 MB; for sure, it does not like 3.25 
MB. 

Note: Shortly after finishing this 
piece, I happened to be talking with 
AE's Nole Holmes about GS-RAM III 
and mentioned the problem. Sure 
enough, it turns out Applewoiks 2.0 is 
noted for not "liking anything over 2 
MB"! 

My Applewoiks 2.8 was exhibiting a 
Big-Mem Bug. I wanted to squash flie 
critter, and, if your '2.0 has the same 
problem, so will you. As to finding the 
bug... ? The fix I arrived at is the result 
of a guess that a call to the Total Mem- 



ory tool might be involved. The critical 

machine code looks like this: 

A2 02 ID (LoadX: low= Toolset 
#2;high=tool#29) 

22 00 00 El (JSL to Tool Dis- 
patcher routine) 

In my version, the code shows up at 
$24F4 after BLOADing the Applewoiks 
system file (APPLEWORKS.SYS) at 
$1000. To find it in your Applewoiks 
2.0, BLOAD the system file, go to the 
monitor, and enter 
\A2021D\<1000.4FFFP 

The JSL instruction routes execution 
to Tool #29 in the Memory Manager 
Toolset (#2) in the Ilgs ROM Toolbox. 
It tells your program ho w much memory 
is installed. Since this Total Memory 
number is the one Appleworks' doesn't 
seem to like, I substituted $1B for $1D 
at $24F6 and saved the newly patched 
file: BSAVE APPLEWORKS.SYS, 
TSYS, A$1000, L12390 Oength of file 
as shown in CATALOG). Now, the Dis- 
patcher call goes to Tool #27 in Toolset 
#2, the Memory Manager's Available 
Memory tool. 

A disadvantage of the *black box' 
approach to debugging is that one can 
never claim that a bug is "eliminated". 
Maybe the TM call IS the BM Bug; 
maybe not. In any case, with 3.25 MB 
installed,my 'original' copy still bombs. 
The BMB-patched Appleworks 2.0 
boots without a hitch! 

The Happy CRT 

No doubt about it, among the major 
components of your PC and/or Apple II 
system, the CRT display takes the most 
abuse. Day after day it gets turned ON 
arid Off and run for long periods, all the 
while building up heat and collecting 
dust You can simply wait for all of this 
to take its inevitable toll; OR, you can 
take a few simple steps and have a much 
happier, longer-lived CRT display: 

1. Wash me, Please! Dust reduces 
airflow, mcreases heating, clogs con- 
trols, and can produce arcing from high 
voltage wiring. If your monitor has been 
in service for more than three, or four 
years, it's about time it was cleaned. 
Since, just for starters, a thorough clean- 
ing means removing the case and dis- 
connecting control cables, it is not a job 
for someone lacking experience with 
CRT display innards. (Aside from HV 
shock and tube implosion hazards, there 
are just too many ways to blow it.) A 
novice might get a CRT-wise friend to 
help, contact a maintenance shop, or 
settle for running a vacuum cleaner hose 
over the case vents (top, back, sides, 
AND bottom) with the display turned 
OFF. 

2. Cool it Displays rely upon con- 
vection to move air in, from lower vents, 
and out through the top. Avoid crowd- 
ing the display monitor into a cramped 
hutch and never block off the top with 
manuals, papers, etc.. On a Ilgs the 
monitor normally sits just above the fan 
output vent of Kensington's "System 
Saver Ilgs"; so, these users will get the 
additional benefit of some forced-air 
cooling. 

3. Glitch not; switch not. Naturally, 
you are already using a "System Saver 
Ilgs", one of the top-of-PC units, and/or 
some other AC line deglitcher/surge 
protector. Surges also occur each time 
you turn ON the display. (Switches arc, 
coils produce inductive spikes, capaci- 
tors suck in large currents, etc..) For any 
piece of electrical equipment, Tum-ON 
is a stressfiil instant, the moment when 



failure is most likely. You cannot do 
much about the stress on yourmonitor's 
components; but, you can reduce the 
number of times you *roll the dice'. 
From now on, when you must turn OFF 
your computer briefly to obtain a *cold 
start' or to change some sensitive I/O 
connection, avoid hitting the Master 
Switchon your "System Saver'" ("Power 
Console", etc.). Turn OFF only the com- 
puter. 

4. Learn not to bum. Use "screen 
saver" TSR's(CDA's,NDA's). Should 
a user leave the system running and 
forget to return for a few hours, a saver 
will blank the screen or animate the 
display to prevent burning of a fixed 
image into the screen phosphor. If you 
are the only regular user and would 
prefer not to install saver software, just 
get into the habit of turning down screen 
intensity whenever you get up "for a few 
moments" to answer the phone, brew 
some coffee, or check a back issue of 
Computist. The final *no.bum' hint re- 
lates to YOU: stay away from the screen. 
Yes, people have been using CRT dis- 
plays for years; but, there is some con- 
cern about health effects, the need for 
reduced radiation CRT's, etc.. It's just 
common sense to place the screen at 
least 18"-24" away. 

5. Seeing is believing. If your CRT 
monitor has slipped out of focus, what 
you WILL believe is how much better 
the display looks IN focus! "Good idea. 
I'll adjust the focus next time I start up 
the system." Ahem, what you WON'T 
believe is how much bother is involved. 
On today 's CRT monitors, focus is, gen- 
erally, a *set it and forget it' adjustment 
performed at the factory. Many moni- 
tors do not even supply an access hole, 
let alone a knob, to adjust focus. For 
instance, on the Ilgs you must remove 
the case to get to a control molded into 
the HV power supply, (i.e. This is anoth- 
er job for which you may want some 
expert help.) If your monitor has been in 
service pnly a year or so, it probably 
needs no adjustment. Otherwise, espe- 
cially if the display actually looks a tad 
fuzzy, a focus touch-up is in order. 

Build Your Own Stereo Board! 

Since "HyperStudio 3.0" comes with 
its own low-noise A/D input board, the 
main reason for adding a Ilgs *sound 
board' is to obtain two-channel output. 
"Hey, my Ilgs has a stereo cable plugged 
right into the Sound Output jack. Isn't 
THAT two-channel sound?" Nope; and, 
it is not "stereo" either. The jack is a 
standard stereo jack; but, the "Left" and 
"Right" outputs are connected to a sin- 
gle 'composite' source. Possibly, Apple- 
originally intended to supply two-chan- 
nel sound; perhaps, the idea was just to 
simplify connections to stereo systems. 
(Stereo devotees get upset when you 
give them just one 'channel' to plug in.) 
Whatever, the fact remains: for multi- 
channel output you need to add a "sound 
board". 

Why bother? Some programs offer 
true stereo — effects and music are lifted 
from stereo sources or 'recorded' using 
two mikes — others deliver simulated 
stereo. Many products output some ef- 
fects (like a bow twang) through one 
channel and other effects (the THUNK! 
of an arrow hit) through the second 
channel. Stereo, of course, produces 
spacious, 'S-D sound'; but, even the 
'separated channels' approach can 
spread out the action and add realism. 
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From input to output, the TDX design 
is straight-forward and simple. First, 
Ilgs audio enters the 14052 where the 
"Left" and "Right" channels are sepa- 
rated using the CO input to turn ON the 
appropriate section (output X or Y) when 
its channel is valid. (This happens at 
supersonic speeds so that the user doesn't 
notice that each channel is ON half of 
the time.) Then, each output goes to a 
pair of op amps where it's filtered and 
amplified. 

Design objectives were low noise, 
low distortion, andlowpower consump- 
tion. From the start I expected that on- 
board power amp IC's would be too 
puny to drive our speakers to desired 
volume levels and maintain low distor- 
tion; so, the board includes no power 
amp IC's and is not intended to directly 
drive low impedance loads such as speak- 
ers. Like a tuner, CD deck, or other hi-fi 
source, it connects to a stereo amplifi- 
er's AUX inputs (or 'Tuner", *Tape", 

etc. inputs) or to the inputs of speaker 
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units with built-in amplifiers. TDX has 
plenty juice to drive any decent stereo 
system at *blow out the windows' vol- 
ume levels. 

As shown in the diagram, nearly all 
connections between TDX and the com- 
puter, including ground, are made over 
the J-25 lines. Power (+5 Volts and -5 
Volts) comes from the slot into which 
the board is plugged. The outputs go to 
"RCA-type" hi-fi jacks mounted on the 
rear of the board for easy access via 
standard audiocables. When placing the 
jacks, be sure to aUow space (between 
the jacks and rear of the computer) for 
the cable plugs or arrange for the j acks to 
line up with an opening. 

The J-25 connection is via a 7-pin 
mini-molex ribbon cable. It can go to J- 
25 (located near the memory expansion 
slot); or, if J-25 is being used by the 
HyperStudio A/D input board, it plugs in 
there. (On both J-25 and itsextension on 
the A/D board, pin#l is nearest the front 
of the computer, pin #2 is next, etc..) All 



of the parts, including the Apple-com- 
patible circuit board, are commonly 
available. 

I built the TDX stereo board near the 
start of the Ilgs era just as games like 
'Tower of Myraglen" were beginning 
to appear. It sounded great then and it 
sounds great today running "Dungeon 
Master", "Instant Music", "Jam Ses- 
sion", and Hyperbole MIDI-synth piec- 
es. If your Ilgs is still in mono mode, 
why not make '92 the year you *go 
stereo'. Add a commercial unit or build 
the TDX. Either way, when you spread 
out the sound you open up the fun! 

Magic Candle II Support 

Anyone who played the first "Magic 
Candle" will appreciate that 'working 
the kinks' out of Magic Candle II'/PC 
might take some doing. While a long 
awaited mouse-input version remains in 
development, Mindcraft is now ship- 
ping the 1.50 revision which squishes 
bugs related to magic scrolls, mind- 



stones, and characters who disappear 
while on assignment. (Other bugs which 
allowed walking on water and over 
mountains, denied access to ship travel, 
etc. were fixed in a series of earlier 
revisions.) After some experiences with 
having to restart play from scratch in 
other adventures, you can bet I asked 
about any similar requirement for MC2 
fixes. According to Mindcraft's Dan 
Riddle, the game was specifically de- 
signed to allow players to retain charac- 
ters and not suffer any loss in progress as 
upgrades occur. The 1.50 update dis- 
kette is free to game owners who request 
it. 

Platinum Painting Made Easy 

The one 'necessary item' not includ- 
ed in Beagle Bros 's Platinum Paint pack- 
age is a Quick Reference Card for key- 
board commands. Particularly when 
working in fiill-screen mode, KB com- 
mands (e.g. to change colors, switch 
between Marquee and Pen tools, etc.) 
are great time savers. After yet another 
trip to the shelves (to find the manual 
and look up some key sequence) I decid- 
ed enough was enough and put together 
theofficial Computist "Frequently Used 
KB Commands" card. Cut out, copy, or 
whatever. Slap the 'card' into a plastic 
cover, and enjoy! 

Next 

Look for Roger Wagner's HyperStu- 
dio 3.0 and Microsoft's Visual Basic 
plus Nite Owl's slip-on battery. SSI's 
Eye of the Beholder 11' is one of several 
games *on-deck', along with ... more! 

Vendors 

APPLIED ENGINEERING: 3210Belt- 
line, Dallas, TX 75234 atten: Nole 
Holmes (214-241-0055, orders: 214- 
241-6060) 

BEAGLE BROS.: 6215 Ferris Square, 
Suite 100, San Diego, CA 92121 at- 
ten: Bevey Minarovich (800-345- 
1750) 
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++ + + Move tfdS'J^ Attributes 



* D Double 
N Invert 

Y brib 

* / Slant 
Brush if y 
Collapse 
Remove Color 
Replace Color 
Halve 
Shadow 
Stretch 
Cut 

Copy I 

Paste 
Undo 
Nxt/Prev Brsh | 



* s 
c&x 

V; 
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ELECTRONIC ARTS: 1450 Fashion 
Island Blvd., San Mateo, CA 94404 
atten: Marci Galea & Lisa Higgins 
(415-571-7171/ orders: 800-245- 
4525) 

Douglas Hecht: 14724D Perthshire 
Road, Houston, TX 77079 (713-589- 
2176) 

HYPERB OLE: 2402 Yoakum #2, Hous- 
ton, TX 77006 atten: Greg Roach, 
Ed. (Subs: phone or mail to Resource 
Central) 

LUCASFILM GAMES: P.O. Box 
10307, San Rafael, CA 94912 atten: 
Sue Sesserman (415-721-3334; or- 
ders: 1-800-STARWARS) dist: EA 

MINDCRAFT: 2291 205th Street, Suite 
201, Torrance, CA 90501 atten: Dan 
Riddle(213-320-5215)dist:Bectn)n- 
ic Arts 92 

NITE OWL PRODUCTIONS: 5734 
Lamar Blvd., Mission, KS 66202- 
2646 atten: Bob Shofstall (913-362- 
9898) 

PRODUCT MONITOR: 7814 Santa 
Elena, Houston, TX 77061 atten: Jeff 
Hurlburt (713-645-8680) 

QUALITY COMPUTERS:20200Nine 
MileRoad, St, aairShores,MI48080 
atten: Walker Archer(313-774-7200; 
oiders:800-443-6697) 

RESOURCE CENTRAL: P.O. Box 
1 1250, Overland Paik, KS 66207 at- 
ten: Tom Weishaar (913-469-6502) 
. ROGER WAGNER: 1050PioneerWay, 
Suite P, El Cajon, CA 92020 atten: 
Garland Buckingham (619-442- 
0522) 

RUSH LEMBAUGH TALK SHOW: 
EIB Network, 2 Penn Plaza, 17th 
Hoor, NY City, NY 10121 atten: 
RushLembaugh 

STRATEGIC SIMULATIONS INC.: 
675 Almandor Ave, Sunnyvale, CA 
94086 atten: Kathleen Watson (408- 
737-6800) dist: Electronic Arts 

ZIP TECHNOLOGY: 5601 Slauson 
Ave. #264, Culver Qty, CA 90230 
atten: PR/Mktg. (800-937-9737) 



Vince Andrews 
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Questron II CDA v2.0 

I have written this program for those 
that would like to alter their character 
while they play. 

Information: 

12/16/91 vl.O - 1 started to write this 
program. 

1 2/2 1/9 1 V 1 . 1 - Fixed the search rou- 
tine. It would lock up memory. 

12/23/91 vl.2 -Fixed the Weapons & 
Armor routines. They now show the 
correct item you are currently equipt 
with. 

12/30/91 v2.0 - Rewrote the search 
memory routines. Now it searches mem- 
ory 10 times quicker than before. 

Installing the CDA cheat 

This can be done in two different 
ways. The first is by copying the file 
•QUESTRON.CDA' to the folder */ 
SYSTEM/DESK. ACCS. Then ieboot 
the computer. " 

The second way is by using a CDA 
installer, such as the one I have includ- 
ed. Justlaunch 'QUESTRON.CHT' and 
it will install the CDA for you. (Both 



files must be in the same directory or it 
will not woric.) 

Using the CDA 

Once the CDA is installed then you 
may launch the file •Q2.SYS16' on the 
disk /Q2. After you have started to play 
the game, enter the Control-Panel and 
choose 'Questron IF. It will do a one 
time search so please be patient (about 
10 seconds.) 

You may now alter your character. 
Just select what you want to edit and 
press <Retum>. Use the anow keys to 
increase/decrease values. Hold Open- 
Apple key down while you press the 
arrow key and it will increase/decrease 
by groups of 5 or 100. 

Address where the 
game data is stored: 

Hold the Open- Apple key down when 
you select the CDA cheat in the Desk 
Accessory Menu. It will display the ad- 
dress of where the game data is stored in 
the upper left-hand comer of the screen. 
I put that there for those that would like 
to snoop about memory. 

Questron.CD A Source 

* Questran II CDA Cheat v2.0 
^ A classic desk accessory 

* Vince C. Andrews 1 9 Dec 91 
*Merlin-1 6+ Assembler 

* Use OA-6 to Assemble 

REL 

LST off ;Turn listing on/off here 

XC ;65C02mode 

XC ;65816mode 

MX %00 ;Fullgsmode 

* Equates and Macros used: . 

SET_80Ca EQU $92 

MTXT.OFF EQU $98 

M7XT_ONEQU$9B 

PNT EQU$EO ;Al9oE1Z3 

KEY EQU$EOCOOO jGetkey 

STROBE EQU$E0C010 .-Clear Keyboard Strobe 

_WriteChar MAC 

Tool $180C 

<« 
OTextWriteBlock MAC 

PHL ]1 

PxW]2;13 

Tod $1E0C 

<« 
_SetOutputDevice MAC 

Tod $100C 

<« 
JnitTextDevice MAC 

Tool $150C 



<« 

_WriteCString MAC 

Tod$200C 

<<< 
PxW MAC 

DO jOAl 

PHW]1 

DO ]0/2 

PHW]2 

DO KV3 

PHW]3 

DO ]0/4 :nope 

PHW14 

FIN 

FIN 

FIN 

FIN 

<« 
PHL MAC NByte 

IF 1h]^ 

PEA *I1 

ELSE 

PHW11+2 

FIN 

PHW]1 

<« 
PHW MAC :1 

IF HI 

PEA]1 NBank 

ELSE 

IF MX/2 

LDA ]1+1 

PHA 

FIN 

LDA 11 

PHA 

FIN 

<« 
Tod MAC 

LDX#11 CByte 

JSL $E10000 

«< 

* Required stMff of all GDA*s: 

* The string is what goes on the 

* Control panel listing. 

CBytel 
BEGIN STR 'Questron ir 

ADRL START ;Entry point 

address 
ADRL EXIT ;Exit "routine" 

address 

;(justanRTL). 
START PHB iSavecun-ent data bank 

PHK ;Get our bank 

PLB ; and set data bank to it 

PEI PNT ;Savethe4zplocsweuse 
PEI PNT+2 ; and zero the bank byte 
STZ PNT+2 ; for tang addressing 
pea 1 ;Pascal device type 

pea ;inslot3 CByte2 

pea 3 

_SetOutputDevice 
pea 1 ;initialize standard output 



Jn'rtTextDevtae 

PEA SET_80COL 

_WriteChar 

pea $06 ;tum off cursor 

_WriteChar 

jsr Fast_Speed 

stz Screen 

jsr Border 

Ida Address 

beq mope 

jmp Found 

pea #AWaitLine 

pea #WaltUne 

.WriteCString 

Mx #1 ;startatbank1 

Idy #$1000; address 10CX) 

stz PNT 

stx PNT+2 

iny ;next byte 

beq NBank 

iny 

beq NBank 

cpy #$bffd 

beq :1 

cpy #$8ffe 

bne CByte 

cpx #1 

bne CByte 

inx 

stx PNT+2 

cpx #$tt ;quitatbank 

bne NByte 

pea #'^NotFoundLine 

pea #NotFoundLine 

_WriteCString 

jsr GetlKey 

stz Address 

jmp QUIT 

Ida [PNT],y 
cmp Bytes2Scan 
beq CBytel 
cmp Bytes2Scan+1 
bne NByte 
dey 

Wa [PNT],y 

cmp Bytes2Scan 

bne NByte 

iny 

iny 

Wa [PNTl,y 

cmp Bytes2Scan+2 

bne NByte 

iny 

iny 

Ida [PNT],y 

cmp Bytes2Scan+4 

bne NByte 

iny 
iny 
phy 



BLRCK 

KEV 

IK 

ROOM 
— — > 




^STORT 



Twilight Tonb 
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phx 

Ida [PNTl,y 

pha 

Ida #0 

Sep $30 

pla 

pix 

rep $30 

pIx 
ply 
cmp #$af 



PLB ;Restore original 


datat>anl< 


PLA 




STA PNT+2 




PLA 




STAPNT 




T RTL 




int the Border Routine: 





Border 



pea MTXT_ON ;tum on MouseTexl 




bne 


:1 






_WrileChar 


tya 








OTextWriteBlock 


sec 




!.' 




«BiockO;«0;#6locl<OEnd- 


sbc 


#15 






BlockO 


tay 








OTextWriteBlock 


Ida 


IPNTJ.y 






#Block1;«0;#Block1End- 


sta 


Address 






Bk>ck1 


iny 








9TextWriteBk)ck 


iny 








»Rk)ck?;«0;»Block2End- 


iny 








Bk>ck2 


Ida 


IPNTl.y 






pea MTXT_OFF;tum off MouseTexl 


sta 


Addresst2 






_WriteChar 


bra 


Found 






Its 


:1 imp 


MByte 




* 




Found 






* Rx and Update screen and table pointers: 


Ida 


#0 




• 




Sep 


$20 




FixT«Me 




Idal $e0c061 






Ma Screen ;What screen to show 


bpl 


:1 






asl 


rep 


$20 






asl lAddress every 4 bytes 


jsr 


Where 






tax 


:1 sep 


$20 






Ma Table;(;Get first 2 bytes 


Ida 


#7 






sta PNT 


sta 


BlanldJne+2 






kia Tablet2.x ;Get next 2 bytes 


rep 


$30 






sta PNT+2 


pea 


rBlankLine 






rts 


pea 


«BlankLine 




* 




JWriteCString 




* This will clear and draw the whole menu: 


stz. 


Temp 




* 




stz 


Saeen 




Menu 


rep $30 


Restart Ida 


«0 






Wa PNT+2 


Idx 


Screen 






pha 


cpx 


«0 






Wa PNT 


bne 


:submenu 






ck5 


Ida 


Temp 






adc CurOHset 


:submenu sta 


Cursor 






pha 


stz 


CurOHset 






_WriteCString 


jsr 


FixTsrible 






sep $30 


jsr 


Menu 






My CurOffset 


:1 jsr 


RxTable . 




]ScrLoc1 


Ida (PNT).y 


jsr 


SetCursor 






beq :1 


jsr 


Readied 






iny 


jsr 


FixT^)le 






bra jScrLocI 


jsr 


GetKey 




:1 


my 


bcc 


:1 ;clear so reset cursor 




Ma (PNT).y 


Ida 


Char 






beq :2 


cmp«$8d 






sty CurOHset 


beq 


Restart 






bra Menu 


CfDp 


#0 ;quitifchar-Oand 


:2 


rep $30 


beq 


QUIT ; carry 


was set 




tts 


Ida 


Screen 




* 




asl 






'Thiswil 


1 inverse current line: 


tax 




♦ 




Ida 


Table5,x ; over quit because 


SetCursor 


sta 


Cursor ; esc was pressed. 




Ida Cursor 


dc 








tax 


bra 


:1 


"^ 




Idy #0 


QUIT CLC 






FindEntr) 


f 


REP %001 10000 


;16-bitmode 




sep $30 





cpx #0 


dfb 42+32.5+32 


beq FE3 


asc 'Readied* 


FE1 Ma (PNT),y;Table constantly changing 


bri( 


beq FE2 


* . 


iny 


* Gets a keypress: 


bra FE1 


* 


FE2 iny 


Seett ds 2 . 


dex 


GetKey 


bra FindEntry 


jsr GetlKey 


FE3 rep $30 


Ida Char 


sty CurOHset 


cmp #$8a 


pea «$f 


beq GK DownArrow 


_WriteChar 


cmp #$8b 


FE4 Ma PNT+2 iGet hi addr 


beq GK_UpArrow 


pha 


cmp «$8d 


Ida PNT iGettoaddr 


beq GK_Return 


cte 


cmp #$9b 


adc CurOHset jAdjustit 


bne GetKey 


pha 


dc 


_WriteCString ;Printit 


jsr FE4 ;tum oH the inverse line 


pea #$e 


sec ;set to point at QUIT 


_WriteChar 


rts 


rts 


CheckOA pha 


♦ 


sep $20 


* Check and Print what is Readied: 


dv 


» 


stz SetBit 


Readied 


Mai $e0c061 


Ida Address 


bpl :1 


sta PNT 


Ma #$60 


Ida Address+2 


sta SetBit 


sta PNT+2 


bit SetBit 


Ida Screen 


:1 rep $30 


cmp #2 


pla 


beq :1 


rts 


cmp #3 


GetlKey sep $20 


d 


Ittesttot 

2 


k 9 HIDDEN ROCK 
1 IDDRyVIEl*! 
I' 11 FOLMRN 

12 ONTRGR 

13 SflNCTURRV 
CflTHEDRRL 

IM CROOKED PINE 
15 SRNTOR 


1 OCTflPOINT 

2 RIVERCREST CflTHEDRRL 

3 SERCREST Vj' A.' £ 

5 REDSTONE CRSTLE Ul^t'l^BS Of 

6 CRRMFORD I 


7 LONGVIEM 
3 GREAT PLAINS 
CflTHEDRRL 


UWBOll 


beq :2 


Idal $eOcOOO 


rts 


bpl GetlKey 


:1 sep $20 


stal $eOc010 


My #12 


rep $20 


Ida [PNT].y 


cmp #$eO 


cmp'«$H 


bcc :2 


bne :skip1 


and #$df 


Ma m 


:2 sta Char 


bra :skip2 


dc 


:skip1 inc 


\ rts 


:skip2 ck: 


GK_DownAn'ow 


adc #4 


jsr FE4 ;tum off the Inverse line 


sta :Text+2 


kJa Screen 


rep $20 


asl 


pea #*:Text 


tax 


pea #:Text 


Ma Cursor ;compare cunrent line 


JWriteCString 


cmp Table5,x ;to maximum ine 


rts 


beq :1 


:2 sep $20 


inc Cursor 


My #13 


cte 


Ma [PNT].y 


rts 


cmp «$H 


:1 stz Cursor 


bne :skip3 


dc 


-* Ma #0 


rts 


bra :skip4 


GK.UpArrow 


:skip3 inc 


jsr FE4 ;tum off the inverse line 


:skip4 cte 


Ida Cursor 


adc #5 


bne :1 ;branch if not 


sta :Text+2 


Ida Screen 


rep $20 


asl 


pea r:Text 


tax 


pea #:Text 


Ida Table5,x ;compare maximum 


_WriteCString 


line 


rts 


sta Cursor ;store maximum line here 


:Text 


hex 1e 


bra :2 
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:1 


dec Cursor 




sec ;retum with carry set 


:2 


dc 




rts 




rts 


'** ' 




GK_Relum | 


T0_C3 


jsr Blank_Screen 




Ida Screen ;get screen # 




Ida #2 iin'rtialize weapon menu 




asl 




sta Screen 




tax ^ ' ■ 




stz Cursor 




Ida Cursor ;getfine# 




sec ;retum with carry set 




cmp Table5,x 




rts 




bne :1 ;branch iff not at quit 


** 






Ida Screen 


T0_C4 


jsr Blank_Screen 




bne :skip ;branch iff not main saeen 




Ida #3 i'mitializeannormenu 




stz Char 




sta Screen 




l)ra :skip2 




stz Cursor 


skip 


jsr BlankScreen 




sec ;retum with cany set 


:skip2 


stz Screen 




rts 




sec ;(update saeen) 


** 






rts 


T0_G5 


jsr Blank_Saeen 


:1 


Ida Screen ;get screen # 




Ida #4 ;initialize spells menu 




beq :main ;branch iff main screen 




sta Screen 




Ida Screen 




stz Cursor 




dec 




sec ;retum with carry set 




asl 




rts 




tax 


** 






jmp (GKJ*leO;{);execute routine 


T0^C6 


Ida Address ;rope/hooks 


:main 


Ida Cursor ;get current position 




sta PNT 




sta Temp jsave cursor ' 




Ida Address+2 




asl ;adjustby2 




sta PNT+2 




Idy Screen ;get current screen 




bra :2 


]lup 


beq :done 


:again 


jsr GetlKey 




asl ;adjustby2 




cmp #$8a 




dey 




beq :1 




bne ]lup ;loop until y=0 




cmp #$8b 


idono 


tax 




beq :2 




jmp (GKJTable^C) ;execute routine 




anp«$8d 


**~ 






bne :again 


TO_CO 






pea rdi 




pea #*:Text 




pea «clr 




pea #:TM 




JVriteCSlring 




JVrit«String 




jsr RxT^Me 




Idy m ,'Change at this location 




dc 




kJx «9999 iM^value 




rts 




jsr <?hange 


:1 


Sep $20 




dc 




Ida *0y i . . :,, r. : . .. 




rts 


- ^" . 


kJy #$45 ' 


:Text 


hex 1e 




sta IPNT],y 




dffb 42+32.5+32 




rep $20 




asc * hp: • 




pea rNo 




hex 1e 




pea #No 




dffb 48+32.5+32 




WrileCSlring 




b* 




bra -again 


** 




:2 


sep $20 


T0_C1 


pea #^:Text 




Ida #1 




pea #:Text 




Wy #$45 




JVriteCString 




sta [PNTl,y 




Idy U iChange at thb location 




rep $20 




Idx #32/6/ ;Max value 




pea #*Yes 




jsr Change 




pea #Yes 




dc 




_WrileCString 




rts 




bra :again 


:Text 


hex 1e 


Yes 


hex 1e 




dfb 42+32.6+32 - 




dfb 44+32.11+32 




asc • gp: * 




asc -Yes' 




hex 1e 




brk 




dfb 48+32,6+32 




brk 




brk 


No 


hex 1e 


•♦ 






dft) 44+32.11+32 


T0_C2 


jsr Blank_Screen 




asc tto' 




Ida #1 jinitialize status menu 




brk 




sta Screen 




brk 




stz Cursor 


dr 


hex 1e 






dft) 44+32.11+32 




brk 




asc ' ' 


*• 






brk 


Sta 


pea r:T«(l 


** 






pea «:Texl 


T0_C7 


k)a #17 




JVriteCString 




jsr B_S 




My #10 ;ChangealthBk)caiion 




OTextWrheBk>ck 




Mx #200 ;Maxvalue 




«About;«0;#Aboul End- 




jsr Change 




About 




dc 




jsr GetlKey 




rts 




Ma #17 


:Text 


hex 1e 




jsr BJS 




db 44+32.8+32 




hJa #$8d 




asc "Sta: • 




sta Char 




hex 1e 




sec iquKkanswer 




dft) 48+32,8+32 


** 


rts 


** 


bik 


Stats 


kla Cursor 


im 


pea «*:Text 




asl 


. 


pea #:Text 




tax 




JVriteCSlring 




jmp (:Stats.x) 




My #11 ;Changeatthisk)calk)n 


:Stats 


dw Chr 




Mx eoo Maxvakje 




dw Str 




jsr Change 




dw Agl 




dc 




dw Sta 




rts 




dw Int 


:Texl 


h«( 1e 




dw Qt 




dft) 44+32,9+32 


** 






asc 'M: ' 


Chr 


pea #*:Text 




heK 1e 




pea #:Text 




dft) 48+32,9+32 




J/VriteCString 




bik 




kly #7 ;Changeatthisk)caik)n 


** 




1 


3.tL^stV6' 


h 


7 DEMPH 


t[ 


fc*v 14^ -^^'V V 


I'l^ 


8 LOOKOUT POINT 






- 


9 BIG OflK 




^ 




10 GRISSOLD 




^ 




11 SLIPPERY ROCK 

12 DUNGEON 


1 


TWILIGHT CRTHEDRfIL 




2 


BRflNTOWN 






3 


GRERT FORTRESS 


^1% 


^ rf^ 


M 


QBCHHRO URKE . 1 


iP 


^ori^ttt /rF 


5 


BURNSIDE ^ 


Jbol 


flriH 111 Ol 


6 


DUNGEON ^ 

OF jmm 




^M-'f' ♦•'»' V*' 




DESPniR jg 


yCVtZVtVS 




Mx #200 jMaxvalue 


Qt 


stz Screen 




jsr Change 




sec 




dc 




rts 




rts 


*• 




:Text 


hex 1e 


Weapons 




dfb 44+32.5+32 




Ida Address 




asc -Chr: ' 




sta PNT 




hex 1e 




Ma AddiBS&+2 




dfb 48+32,5+32 




sta PNT+2 




bri( 




Ma Screen 


** 






asl 


Str 


pea «*:Text 




tax 




pea #:Text 




Ma Cursor 




JVriteCString 




cmp Tabl^.x 




Idy #8 ;Changeatthisk>catk)n 




beq :quH 




klx #200 ;Maxvahie 




sep $20 




jsr Change2 




My #12 




dc 




Ma IPNT].y 




rts 




cmp #$ff 


:Text 


hex 1e 




bne rskipl 




dib 44+32.6+32 




Ma #0 




asc 'Str ' 




bra 3kip2 




hex 1e 


:sMi>1 


inc 




dft) 48+32.6+32 


:sK|p2 


dc 




brk 




adc #4 


** 






sta :Text+2 


Agl 


pea #*:Text 




rep $2U 

^0^^ JIA.T^wft 



:Text 



pea #:Text 

JVriteCString 

Idy #9 iChange at this location 

Idx #200 ;Max value 

jsr Change2 

dc 

rts 

hex 1e 

dfb 44+32,7+32 

asc 'Agl: ' 

hex 1e 

dfb 48+32,7+32 



pea #^:Texl 

pea #:Text 
JVriteCString 

sep $30 

Ida Cursor 

bne :skip3 

Ida «$FF 

bra :skip4 
:slqp3 dec 

:sk|>4 Idy »12 

sta IPNT].y 

Ida Cursor 
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beq 


:1 




dc 






adc 


#24 position of weapon 




dec 






tay 






Ida 


[PNT].y 




bne 


:1 




inc 






sta 


[PNTl.y 


1 


rep 


$30 




jsr 


RxTable 




dc 






rts 




quit 


stz 


Screen 




sec 


;(update screen) 




rts 




Text 


hex 


1e 




dfb 


42+32.5+32 




asc 


1 i 


k* 


brk 




^rmor 


Ida 


Address 




sta 


PNT 




Ida 


Address+2 




sta 


PNT+2 




Ida 


Screen 




asl 






tax 






Ida 


Cursor 




cmp 


Table5,x 




beq 


:quit 




Sep 


$20 




kJy 


#13 




Ida 


[PNT].y 




cmp 


#$ff 




bne 


:skip1 




Ida 


#0 




bra 


:skip2 


:skip1 


inc 




:skip2 


dc 






adc 


#5 




sta 


:Text+2 




rep 


$20 




pea 


r:Text 




pea 


#:Text 




_WriteCString 




sep 


$30 




Ida 


Cursor 




bne 


:skip3 




Ida 


#$FF 




bra 


:skip4 


:skip3 


dec 




:sldp4 


Wy 


#13 




sta 


[PNT].y 




Ida 


Cursor 




beq 


:1 




dc 






adc 


#39 iposition of armor 




dec 






tay 






Ida 


[PNT].y 




bne 


:1 




inc 






sta 


|PNT],y 


:1 


rep 


$30 




jsr 


RxTable 




dc 






rts 




:quit 


stz 


Screen . 




sec 


;(updatesaeen) 




rts 




:Text 


hex 


1e' 




dfb 


42+32.5+32 




asc 


1 1 




brk 





Spells Ida Cursor 

asl 

tax 

jmp {:Spells,x) 

:Spells dw MM 

dw FB 

dw SW 

dw TS 

dw Qt 

MM pea r:Text 

pea #:Text 

10 



^WriteCString 

Idy #19 ;Change at this location 

Idx #200 ;Max value 

jsr Change2 

dc 

rts , 

:Text hex 1e 

dfb 42+32,5+32 

asc * MM: ' 

hex 1e 

dfb 47+32,5+32 

brk 
** 

FB pea #^Text 

pea #:Text 

^WriteCString 

Idy #20 ;Change at this location 

Idx #200 ;Max value 

jsr Change2 

dc 

rts 

:Text hex 1e 

dfb 44+32,6+32 

asc 'FB: ' 

hex 1e 

dfb 48+32,6+32 

brk 

** 

SW pea #^Text 

pea #:Text 

_WriteCString 

Idy #21 ;Change at this bcation 

Idx #200 ;Max value 

jsr Change2 

dc 

rts 
:Text hex 1e 

dfb 44+32,7+32 

asc 'SW: ' 

hex 1e 

dfb 48+32,7+32 

brk 

TS pea r:Text 

pea #:Text 

^WriteCString 

Idy #22 iChange at this location 

Idx #200 ;Max value 

jsr Change2 

dc 
.rts 

:Text hex 1e 

dfb 44+32,8+32 

asc TS: ' 

hex 1e 

dfb 48+32,8+32 

brk 

** 

mx $00 
Where php 

phy 

phx 

pea #'^:Text 

pea #:Text 

_WriteCString 

pix 

ply 
:done Ida Address+2 

jsr doWord 

Ida Address 

jsr doWord 

pip 

rts 
:Text hex 1e 

dfb 1+32.1+32 

asc 'Address:' 

brk 

* 

doWord phx ;save 

phy ;save 

pha push word 

sep #$30 
ply pull two bytes 

PiX 

jsr PRWORD 

rep #$30 

ply ;restore 

pIx ;restore 



rts 

mx %11 
PRWORD TXA 

JSR PRBYTE 

TYA 
PRBYTE PHA 

LSR 

LSR 

LSR 

LSR 

JSR :DIG 

PLA 

AND#$F 
:DIG ORArO" 

CMP#^"+1 

BLT Cout 

ADCrA"-"9"-2 

mx %00 
Cout PHA 

PHX 

PHY 

PHP 

REP %001 10000 

PHA 

JVriteChar 

PLP 

PLY 

PLX 

PLA 

RTS 

* Enter with Y-reg pointing to location to change. 

* X-reg maximum value to change 

»- 

Change Ida Address 

sta PNT 

kJa Address+2 

sta PNT+2 

sep $20 

Ida Cursor 

dc 

adc #5 

sta :Text+2 

sta ;Text+12 

sta ftext2+2 

rep $30 
:again phx 

phy 

pea #'^:Text 

pea #:Text 

_WriteCString 

ply 

pIx 

Wa [PNTl,y 

dc 

jsr PrDec16 

:wrong jsr GetlKey 

kJa Char 

cmp #$8a 

beq :2 

cmp #$8b 

beq :1 

cmp #$8d 

bne :wrong 

phx 

phy 

pea #^Text2 

pea #:Text2 

_WriteCString 

ply 

pIx 

jsr FixTable 

dc 

rts 

:1 jsr Incr 

bra :again 

:2 jsr Subc 

bra :again 

:Text hex 1e 

dfb 48+32,5+32 

asc ' * 

hex 1e 

dfb 48+32.5+32 

brk 

:Text2 hex 1e 

dfb 44+32,5+32 

asc • 

brk 



* Enter with Y-reg pointing to location to change. 

* X-reg maximum value to change 
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Change2 Ida 


Address 


sta 


PNT 


Ida 


Address+2 


*sta 


PNT+2 


sep 


$20 


Ida 


Cursor 


dc 




adc 


#5 


sta 


:Text+2 


sta 


:Text+12 


sta 


:Text2+2 


rep 


$20 


:again phx 




phy 




pea 


#*:Text 


pea 


#:Text 


_WriteCString 


ply 




Ida 


IPNT].y 


pha 




Ida 


#0 


sep 


$30 


pla 




pIx 




rep 


$30 


dc 




pIx 




jsr 


PrDecie 


:wrong jsr 


GetlKey 


Ida 


Char 


cmp #$8a 


beq 


:2 


cmp 


#$8b 


beq 


:1 


cmp 


#$8d 


bne 


:wrong 


phx 




phy 




pea 


r:Text2 


pea 


#:Text2 


JWriteCString 


ply 




pIx 




jsr 


HxTable 


dc 




rts 




:1 jsr 


Incr2 


bra 


:again 


:2 jsr 


Subc2 


bra 


'.again 


:Text hex 


1e 


dfb 


48+32,5+32 


asc 


i 1 


hex 


1e 


dfb 


48+32.5+32 


brk 




:Text2 hex 


1e 


dfb 


44+32,5+32 


asc 


i 1 


'brk 




** 




Incr jsr 


CheckOA 


stx 


Max 


Ida 


[PNT],y 


B^c 


:No_OA 


dv 




dc 




adc 


#99 


:No_OA inc 




cmp 


Max 


bcc 


:less 


beq 


:less 


kJa 


Max 


:less sta 


[PNT].y 


rts 




Incr2 jsr 


CheckOA 


stx 


Max 


Ida 


lPNT].y 


bvc 


:No_OA 


dv 




dc 




adc 


#4 


:No_OA inc 




sep 


$20 




COMPUTIST#87 



:iess 



Subc 



cmp 

bcc 

beq 

Ida 

sta 

rep 

rts 

jsr 

stx 

Ida 

bvc 

dv 

sec 

sbc 

:No_OA dec 
cmp 
bcc 
beq 
Ida 
sta 
rts 
jsr 
stx 
Ida 
bvc 
dv 
sec 
sbc 

:NoJ)A dec 
sep 
cmp 
bcc 



:less 



Subc2 



:less 



Max 



Ida 
sta 
rep 
rts 
ds 



Max 

:less 

:less 

Max 

lPNTl.y 

$20 

CheckOA 
Max 
[PNT].y 
:NoOA 



#99 

Max 

:less 

'.less 

#0 

[PNT].y 

CheckOA 
Max 
[PNT].y 
:NoOA 



#4 

$20 

Max 

:less 

:less 

#0 

[PNT].y 

$20 



:DIV 



* PRDEC16 = 2-byte dedmal output routines. 

* PRDEC16 enters with long A and prints A. 

* 

PrDecie phx 

phy 

php 

tax 

xba 

sep 

sta 

stx 

Ida 

bcc 

kia 
:0V sta 

Idx 

stx 
iOADO Wy 

rep 

Ida 

sec 

iny 

sta 

sbc 

bcs 

sep 

tya 

dex 

bmj. 

cmp 

beq 

sta 

bit 

bmi 

Ida 

bpl 

jsr 

dex 

bpl 

pip 

ply 

pix 

rts 
:NUMTBLda 
NL dfb 

NH dfb 



:MODE 



-.DIG 
:NX 



;Entry to print 16-bit A 

$30 

NH lEntry to print 8-bit A,X 

NL 

#0 ;Left justify if CC 

:0V 

r";Right justify if CS 

JUST 

#8 

NFL 

ro"-i 

%00100000 ;LongM 

NL ;lndex length no matter 

;Needed 1st time 

NL 

:NUMTBL,X 
:DIV 
%001 10000 



:DIG 

ro" 

:MODE 

NFL 

NFL 

:DIG 

JUST 

:NX 

Cout 

:LOAD0 



BS 



Blank_Screen 

kia Screen 

asl 

tax 

Ida Table5,x ;get total lines 

inc 

inc ;add2more 

tax ;store In X 

dc 

adc #35 ;Pascalgotoy 

sep $20 

sta BlankLine+2 

rep $20 

phx 

pea #^BIankUne 

pea #BlankLine 

^WriteCString 

dec BlankLine-f2 

pIx 

dex 

bne ]kjp 

rts 

* This will change the speed of the computer to fast 

* 

Fast_Speed 
php 



Ihjp 



Spd cur 


ds 


2 




Spd_fst 


ds 


2 




CurOffset ds 


2 




Address 


add $0 




GK Table 


1 








dw 


TO_CO 


:hp 




dw 


T0_C1 


;gold 




dw 


T0_C2 


initialize status menu 




dw 


T0_C3 


{initialize weapon^ menu 




dw 


T0_C4 


;initializeannormenu 




dw 


T0_C5 


,-initialize spells menu 




dw 


T0_C6 


;rope/hooks 




dw 


T0_C7 


;about 


GK_TableO 








dw 


Stats 






dw 


Weapons 




dw 


Amwr 






dw 


Spells 




Table 


adrl 


TableO 






add 


Tablet 






adrl Table2 






adrl 


Tables 






add 


TabM 






add 


Tables 




TableO 


dfb 


$1e,23+32,32^ ;(10ines) 




ASC -Change H'itPolnts'.00 




dfb 


$1e.23+32.32+6 




ASC -Change Gold',00 




NFL 
JUST 



dfb 
dfb 
mx 



1.10.100,1000,10000 









%00 



sep $30 

Ida #1 

ror 

ror 

and #$80 

sta Spd_fst 

Idal $e0c036 

and #$7F 

ora Spd_fst 

stal $e0c036 

dc 

pip 
rts 

* This will copy the extra stuff into this program 

* 

put q2.cda.extra 
typ cda 

sav questron.cda.l 
r#$%&'{)*+r./0123456789 

Data Tables used by 
Questron.CD A source 



Char 


ds 


2 


Temp 


ds 


2 


Screen 


ds 


2 


Cursor 


ds 


2 



Tablel 



dfb 


$1e.23+32.32+7 


ASC -Alter Stats'.OO 


dfb 


$1e.23+32.32+8 


ASC -Change Weapon',00 


dfb 


$1e.23+32,32+9 


ASC -Change Annor',00 


dfb 


$1e.23+^.32+10 


ASC -Change Spells'.00 


dfb 


$1e,23+32,^+11 


ASC 'Toggle Rope &Hooks'.00 


dfb 


$1e,23+32,32+12 


ASC -About lnfo'.00 


dfb 


$1e.23+32,32+13 


ASC 'Quir.OO 


BRK 




BRK 




dfb 


$16.23+32.32+5 ;(6lnes) 


ASC -Charisma'.OO 


dfb 


$16.23+32.32+6 


ASC 'Strength'.00 


dfb 


$16.23+32.32+7 


ASC 


; -Agility-.OO 


dfb 


$16.23+32.32+8 


ASC -Stamina',00 


dfb 


$16,23+32.32+9 


ASC 'lnteiligence',00 


dfb 


$16.23+32,32+10 


ASC -Quit-,00 



BRK 




BRK 




T£A)le2 dfb 


$16,23+32,32+4 ;(16ines 


ASC'None'.OO 


dfb 


$16,23+32,32+5 


ASC 


'Dagger'.OO 


dfb 


$16,23+32,32+6 


ASC 'Hamm6rs'.00 


dfb 


$16,23+32,32+7 


ASC ■Hatchels',00 


dfb 


$16,23+32,32+8 


ASC 'Staffs-,00 


dfb 


$16,23+32.32+9 


ASC 


'Cudgles'.OO 


dib 


$16,23+32,32+10 


ASC 


'Rapi6rs',00 


dft) 


$16,23+32.32+11 


ASC-Axes'.OO 


db 


$16.23+32.32+12 


ASC 'Fauchards',00 


dIb 


$16.23+32.32+13 


ASC 'Sabres',00 


dfb 


$16.23+32.32+14 


ASC -Weighted Speai5',00 


dfb 


$16.23+32.32+15 


ASC 'Pikes'.00 


dfb 


$16,23+32.32+16 


ASC 'Shortbows-,00 


dfb 


$16,23+32.32+17 


ASC 'Broadswords',00 


dfb 


$16,23+32.32+18 


ASC 'Crossbows-,00 


dfb 


$16,23+32,32+19 


ASC -QuH-,00 


BRK 




BRK 




Table3 dfb 


$16.23+32.32+5 ;(9ines) 


ASC -None-,00 


dfb 


$16,23+32.32+6 


ASC -Rawhid6-,00 


dfb 


$16,23+32.32+7 


ASC -Studded Leather-.OO 


dfb 


$16,23+32,32+8 


ASC 


'Ring Mail',00 


dfb 


$16,23+32,32+9 


ASC-BarH*ai|-,00 


dfb 


$16.23+^.32+10 


ASC -Chain lylair,00 


dfb 


$16.23+32.32+11 


ASC -Plate MaH-,00 


dfb 


$16,23+32,32+12 


ASC 'Ribbed »Aai|-,00 


dfb 


$16,23+32,32+13 


ASC -Quit-,00 


BRK 




BRK 




Table4 dfb 


$16,23+32,32+5 ;(5in6S) 


ASC 


'Magic Missiles',00 


dfb 


$16,23+32,32+6 


ASC 'Rreballs',00 


dfb 


$16,23+32,32+7 


ASC 'Sonic Whin6S',00 


dfb 


$16,23+32,32+8 


ASC 'Time Saps'.00 


dfb 


$16,23+32,32+9 


ASC 'Quif .00 


BRK 


i 


BRK 


i 


JsiA^ da 


8 jtotal lines in each ti 


da 


5 


da 


15 


da 


8 


da 


4 


BlankLine 




hex 


1e ;PascalGOTOXY 


dfb 


21+32 p(- column 20 


dfb 


0+32 ;Y-row 


lup 


38 


asc 


1 i 


_A 




hex 


OE linverseoff 


hex 


18 ;mous6 text off 


brk 




WaitLine 




hex 


16 ;PascalGOTOXY 


dfb 


23+32 ;X. column 20 


dfb 


7+32 ;Y-row 



C0MPUT1ST#87 



Readers Data Exchange 



11 





asc 'Scanning memory for the game 


lup 38 




*Queslron CDA installer v1.0 


SetOutputDevice MAC 




data' 


asc 1' idraw under-bars 


* By Vince C. Andrews. 19 Jan 92 


Tool $100C 




hex OE liwerseoff 


_A 


'Merlin-16-i- Assembler 


«< 




hex 18 imouse text off 


hex Oe linverseoff 


' Use OA-6 to Assemble 


JnitTextDevice MAC 




bri( 


BlocK2End 


• ■ 


Tool $150C 


NotFoundLine | 


About 


REL 


<« 




hex 1e ;PascalGOTOXY 


hex 1e IPascalGOTOXY 


LST off iTum listing on/off here 


♦ 




dfb 23+32 ;X.column20 


dfb 28+32 !X-column20 


XC |65CQ2mode 


* Start of the program: 




dfb 7+32 lY.row 


dfb 4+32 lY-row 


XG 165816 mode 


* 




asc 'Questran lib not nk/IEMORY ' 


asc 'Written by Vince Andrews' 


MX %00 iFullgsmode 


bri Start 




hex OE ;inverseoff 


hex 1e IPascalGOTOXY 


♦ 


asc 'Vince Andrews 15 Jan 92' 




. hex 18 ;mousetextoff 


dfb 26+32 iX-column20 


* Equates and Macros used: 


Start PHK 




Ml 


dfb 6+32 lY-row 


* 


PLB 


BlockO 




asc 'Member of Computist Magazine' 


KEY - $EOCO0O 


rep $30 


Linet 


hex 1e ;PascalGOTOXY 


hex 1e IPascalGOTOXY 


STROBE - lEOCOlO 


pea 1 ;Pascal device type 




dfb 21+32 p(. column 21 


dfb 23+32 iX -column 20 


Tool MAC iMacro 


pea ;inslot3 




dfb 0+32 ;Y.rowO 


dfb 7+32 lY.iDw 


LDX #11 


pea 3 




lup 38 


asc 'PO Box 242, K^wwsinWA 98344- 


JSL $E10000 


^SetOutputDevice 




asc '_';38under-bars 


0242- 


FIN 


pea 1 ;initialize standard output 




_* 


hex 1e IPascalGOTOXY 


«< 


JnitTextDevice 


Une2 


hex 1e ;PascalGOTOXY 


dfb 22+32 iX. column 20 


dl MAC iMacro 


pea $06 ;tum off cursor 




dfb 20+32 p(-column20 


dfb 10+32 lY-row 


ADRL 11 


WriteChr 




dfb 1+32 ;Y-raw1 


asc '12/16/91 v1.0- Started this 


<« 


PushWord #0 ;space 




hex OF ;inverseon 


program' 


WriteChr MAC iMacro 


PushWord #0 ;space 




asc 'Z-jirem\ 


hex 1e IPascalGOTOXY 


Tool$180C 


PushLong #0 ;space 




hex OE inverse off 


dfb 22+32 iX. column 20 


<« 


PushWord #0 ;space 




asc "jspace 


dfb 12+32 lY-row 


PulLong MAC iMacro 


PHA ;room for result 




hex OF {inverse on 


asc '12/21/91 vl.1- Fixed the search 


PLA 


LDA #%0101_0000^00000000 ;newlD; 




asc 'A' Kfraw open apple 


bug' 


STA 11 


type. $05 DESK 




hex OE linverseoff 

asc 'Questron II CDA Cheat v2.0' 








-;j,y^n-,f<rT.TW3mjtamhM»mHmimwagB«« 


ACCESSORY 






^^^K 


^^^H 


^^^^M^^^^M 


PHA 




hex OF ;lnverseon 




i^^^^^^^r 




^^^^^^^^HB^^^ 


Tool $2003 LGetNewlD 




li^ 8 




^^K 




im^m^^^p^Pp^ 


lleave user ID on stack 




asc ";8spaces 




^^K 




^Wfoj^^^^^ffrM^ 


PushLong #FILENAME point to 




_A 




^B 


^^^^^^^H£ 


^^^^B^^H^^^^^ 


filename 




asc '_';draw| 




^^^^^^^Hi 


f^^ml^^BB^^^^^ 


PushWord #0 ispedal-memory flag 


Line3 


hex 1e iPascalGOTOXY 




^^^H 




Wi^^^^^^B^^^^^^^ 


Tool $911 1 InitiaLoad 




dfb 20+32 ;X> column 20 




^^B 




mUK^SK^^^m^m^ 


BCCireadok ' 




dfb 2+32 ;Y-raw2 




^^H 




BRLMLIerr ibomb if loader error 




asc 'Z';draw| 




^^^1 




^^^K^^^^^P^^^H 


:readok 




lup 38 




MIITkI 


SauTB 


^^^^^^^^^^^^^M 


PLA 




asc 'L' ;draw under-bars 

—A 


^ffl^^^^B^^^^^^^M 


^Hh?F 


^^ZE^^^^E 


^^^^^^^^B 


STA ourlD 

1^. .Ill . • 'iirNA 




asc '_';draw| 






PullLong ptr iget pointer to DA 
PLA idump direct page/stack addr 


BlockOEnd | 






PLA idump direct page/stack size 


Blockl 








PushLong #0 ispace 


IX 


' 20+32 ;Column-20 

= 3+32-1 ;Starting positions row 3 




^^^^1 




sSSSSS^^^SI^SSSS^^ 


PushLong ptr igive pointer to DA 
Tool$1a02 LFindHandle-ptris 


lY 




^^H 




^^^^^^^^^^^3 


Line4 21 


lup 19 




^^H 




^^^^Rffiii^^H^^ra 


already on stack 


lY 


- lY+1 ;lncreaserow 




^^^1 




^^^^^^^^^p^^a^ 


PullLong handle land we end up with 




hex 1e IPascalGOTOXY (+32 to 




^^H 




^H^^^^^Sj^^^Bi 


a handle! 




XY) 




^^H 




^^S^^S^^^^m^M 


LDA handle+2 icheck handle 




dfb ]X |X. column 20 




^^^1 




^B^^^^^^^^^^l^ 


ORAhandle+4 




dfb ]Y |Y- row (changing) 




^^H 




^^^^^^m^^P^Bh 


BN^ :okay 




asc T iDraw | 




^^^1 




W^K^/b/^MK^^B^ 


PRINT "ILLEGAL HANDLE! DA 




hex 1e IPascalGOTOXY 




^^H 




^^^^^^^^^^^^ 


not installed.''8a8d 




dfb ]X+39 |X- column + 39- 59 




^^H 




^^^^m/^^m/US 


BRL EXIT 




dfb ]Y lY- row (changing) 




^^H 




^^^^^^^^^^^M 


lokay PushLong handle ipass handle to da 




asc '_';Draw| 
Id 


BMfwWnrpywH^M(M|^^H|^BM 


^1 






:CDA Tool$F05 JnstallCDA (doesnl 






return any errors) 
PRINT 8a8d"You may now launch 


Blockl El 




^^M 




WSSSSSSSmSMSSm 


Block2 




hex 1e IPascalGOTOXY 


PU 


the Q2.SYS16 file" 


Une22 


hex 1e IPascalGOTOXY 


dfb 22+32 iX.column20 


STA 11+2 


EXIT , PRINT 8a8d8a8d"Press 




dfb 20+32 iX- column 21 


dfb '14+32 lY-row 


<« 


RETURN." 




dib 22+32 lY-rowO 


asc '12/23/91 v1 2 -Rxed the Weapons 


PushLong MAC iMacro 


SEP $30 




asc 'Z'ldrawl 


&■ 


IF <fel1 


ILUP LDAL KEY iBse wait for key 




hex Oe linverseoff 


hex 1e IPascalGOTOXY 


PushWord #*11 


BPL ILUP 




asc 'Select:' 


dfb 38+32 iX- column 20 


ELSE 


XBA 




hex Of linverseon 


dfb 15+32 lY-row 


PushWord 11+2 


LDAL STROBE 




asc 'J' idraw up-anows 


asc 'Armor routines' 


FIN 


XBA 




hex Oe linverseoff 


hex 1e IPascalGOTOXY 


PushWord ]! 


CMP#$8D 




asc " 


.dfb 22+32 |X = column 20 


<« 


BNE]LUP 




hex Of linverseon 


dfb 17+32 iY = row 


PushWord MAC iMacro 


PRINT 8D8D 




asc 'K' idraw up-anows 


asc '12/30/91 v2.0- Rewrote the 


IF #=11 


REP #$30 




hex Oe linverseoff 


search' 


PEA 11 


LDA #0 iNo error 




hex 1e IPascalGOTOXY 


hex 1e IPascalGOTOXY 


ELSE 


:1 JSL $e100a8 




dfb 50+32 iX. column 30 


dfb 38+32 |X. column 20 


IF MX/2 


DA $29 




dfb 22+32 iY-row22 


dfb 18+32 lY.row 


LDA11+1 


ADRL QParms 




asc 'Open:' 


asc 'routines (fasterl)' 


PHA 


BCS:1 




hex Of linverseon 


hex OE linverseoff 


FIN 


OParms ADRL $0000 




asc 'M' Idraw RETURN 


hex 18 imouse text off 


IDA 11 


DA $00 




hex Oe linverseoff 


About_End 


PHA 


RTL lAlldone 




asc " 


Bytes2Scan 


FIN 


* 




hex Of linverseon 


hex 68.fa,85.f4,86.f6,00 


<« 


•MLIEn'or routine: 




asc '_' idraw 1 




PRINT MAC iMacro 


* 


Une23 


hex 1e IPascalGOTOXY 


Questron.CHT Source 


JSRSENDMSG 


MLIerr PHA 




dfb 21+32 iX- column 21 




ASC]1.00 


PRINT 8a8tf'Questron.CDAwas 




dfb 23+32 lY-rowO 




«< 


not found" 


12 




Rea 


aders Dat 


a Exchan 


90 


COMPUTIST #87 





PLA ;remove error code 




BRI EXIT 


* 


mx %00 


*JSR Routines: 

* 


SENDMSG REP %00100001 




IDA 1.S 




INC 




STA 1.S 




SEP %001 10000 




LDY#0 




LDA (1.S).Y 




BEQ:back 




JSR OUTPUT 




BRA SENDMSG 


:back 


REP«$30 ;backtofull16bit 




RTS 


OUTPUT PHA 




PHX 




PHY 




PHP 




REP %001 10000 




PHA 




WriteChr 




PLP 




PLY 




PLX 




PLA 


BACK 


RTS 


PrFBe 


MX %11 




PHP 




SEP #$30 




LDY#3 


]LUP 


LDA FILENAME,Y 




BEQ :rts 




JSR OUTPUT ;Print filename 




INY 




BRAILUP 


:rts 


PLP 




RTS 



' Storage area: 



handle 


dl 





ptr 


dl 





ourlD 


dw 





FILENAME 


str 



'1/QUESTRON.CDA' 



SAV OUESTRON.CHT.L 



QUESTRON.CDA 



2000:D1 11 


00 


00 


00 


00 


00 


00 


$39DB 


2008 :6C OF 


00 


00 


00 
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El F4 
00 00 
18 22 
F4 00 
00 F4 
48 A2 

F4 00 

00 A2 
90 03 

01 68 
01 68 
00 AD 



^0 00 
00 OA 
00 10 
00 00 
00 00 
51 55 
2E 43 
4F 4E 

00 82 
65 20 

73 20 
20 39 

01 00 
A2 OC 
01 00 
El F4 
00 00 
00 F4 
00 00 
03 20 

00 F4 
11 09 
82 DB 
8D B2 
68 F4 
B4 01 



00 00 
04 02 
00 00 
00 00 
00 00 
45 53 
51 55 
2E 43 
17 00 
41 6E 

31 35 

32 4B 
F4 00 
10 22 
A2 OC 
06 00 
El F4 
00 00 
48 A9 
22 00 

B8 01 
22 00 

00 68 

01 68 
00 00 
48 AD 



$6BA0 
$79C7 
$4BCA 
$3B6A 
$69DF 
$4186 
$E90B 
$E1F1 
$4657 
$62E1 

$69B0 
$3612 
$25A1 
$F98B 
$5E1D 
$F38C 
$8AEC 
$200A 
$D304 
$ODDE 

$6BF2 
$13A6 
$1DFE 
$75E8 
$FD40 
$C06A 



20D0:B2 
20D8:00 
20E0:B0 
20E8:D0 

20F0:C5 
20F8:C4 
2100:EE 
2108:E1 
2110:00 
2118:AD 
2120:00 
2128:D9 
2130:EE 
2138 :E3 

2140 :B2 
2148:E6 
2150 :8A 
2158:F3 
2160:AE 
2168:10 
2170:C9 
2178 :8D 
2180 :A8 
2188:00 

2190:00 
2198:D1 
21A0:AE 
21A8:A0 

i 

21B0:EE 
21B8:21 
21C0:A0 
21C8:01 
21D0:5A 
21D8:22 

21E0:60 
21E8:01 
21F0:F5 
21F8:00 
2200:51 
2208 :2E 
2210:00 
2218 :8B 
2220 :DF 
2228 :F5 

2230:01 



01 48 
El 68 
01 AD 
2A 20 

C7 CI 
CC C5 
EF F4 
EC EC 
82 39 
AE 01 
00 El 
EF F5 
EF F7 
E8 AO 

AE D3 
E9 EC 
8D 8A 
AO D2 
00 E2 
FA EB 
8D DO 
00 C2 
00 El 
BO F4 

6B 48 
F5 E5 
C3 C4 
EE EF 
E4 00 
A3 01 
00 B3 
80 EC 
08 C2 
00 00 

08 E2 
FO 06 
28 60 
00 00 
55 45 
43 44 
00 OD 
97 9B 
05 09 
03 00 

FO SE 



A2 02 
8D AE 
BO 01 
72 01 

CC AO 
Al AO 
AO E9 
E5 E4 
00 AD 
48 A2 
20 72 
AO ED 
AO EC 
F4 E8 

D9 D3 
E5 00 
8D DO 
C5 D4 
30 AF 
AF 10 
FO 20 
30 A9 

29 00 

00 00 

20 72 
F3 F4 
CI AO 
F4 AO 
68 82 
lA 83 

01 FO 
C2 30 

30 48 
El 28 

30 AO 
20 89 
00 00 
00 00 
53 54 
41 F7 
61 74 
9E Al 
30 4F 
40 01 

00 B8 



lA 22 00 
01 68 8D 
OD B2 01 
C9 CC CC 

C8 CI CE 
C4 CI AO 
EE F3 F4 
AE 8A 8D 
BO 01 48 
05 OF 22 
01 8A 8D 
El F9 AO 
El F5 EE 
E5 AO Dl 

Bl B6 AO 
20 72 01 
F2 E5 F3 
D5 D2 CE 
00 CO EO 
CO EO EB 
72 01 8D 
00 00 22 
46 01 00 

00 00 00 

01 8A 8D 
F2 EF EE 
F7 El F3 
E6 EF F5 
96 FF C2 
01 E2 30 
05 20 89 
60 48 DA 
A2 OC 18 
7A FA 68 

03 B9 B8 
01 C8 80 

00 00 00 
OE 31 2F 
52 4F 4E 
17 00 00 
78 7C 87 
A6 DO D4 
82 A2 A7 
4i 01 F5 

01 00 



$0636 
$5DCE 
$6166 
$0437 

$05FE 
$COEA 
$138C 
$CAE2 
$7856 
$8F7F 
$D96C 
$4187 
$3BC1 
$3EB6 

$8653 
$4FA9 
$3CA0 
$C934 
$9C43 
$3B47 
$3170 
$288F 
$C9E8 
$4384 

$B2DD 
$2105 
$5CE7 
$4913 
$7864 
$FC5F 
$864C 
$8451 
$82EA 
$9B55 

$C1D9 
$2FB9 
$758C 
$08F1 
$2B69 
$08BE 
$EADC 
$D358 
$82E5 
$0EA6 

$337E 
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The Basics of Kracking 
Part #15 

Kracking SSI's RDOS 

It'sreallynot fair whenone publisher 
has a system that keeps their software 
from being conveniently backed up, es- 
pecially when so many of the other 
"protection" schemes have fallen to the 
growing corps of talented Krackists. 
With that in mind, and because we all 
love a challenge, we will take a long 
look at the approach used by Strategic 
Simulations, Inc. (SSI) inproviding copy 
protection for their series of war simula- 
tions and "rapid-fire" series, as well as 
some recent games which have a little 
redeeming socialmerit: Epidemic, Ring- 
side Seat, and Galactic Adventures. 

As we've discussed in the basics of 
Kracking series, you can either protect a 
program by various means, or you can 
protect a disk full of programs with 
some sort of DOS modification. DOS 
modifications are usually not too suc- 
cessful, since some enterprising pereon 
Out in pirate land will sooner or later 
figure a way to copy all the files onto a 
normal DOS disk, making all the disk 
protection worthless. SSI's answer to 
this problem was not only to write an 
extensively revised DOS, but to couple 
it with "enhancements" to Applesoft 
using the ampersand vector (more on 
this later). This way, even if you could 



strip the files off the disk, you would 
need to write a DOS which was: 

1. DOS 3.3 compatible 

2.AsshortasRDOS($B100-$BFFF), 
since the programs frequently use all of 
the free space 

3. Capable of correctly interpreting 
the ampersand commands which are 
liberally sprinkled through all the Ap- 
plesoft programs. 

The amount of effort required to do 
this has kept Krackists at bay, at least 
until now. 

First, how to s^Jproach this type of 
Kracking job? Tlie seventh law of Krack- 



not straightforward, "linear" code. You 
may recall that we described how to list 
an RDOS Applesoft file in Basics 103 
(#3):reset,D6:00,C081,Ctrl.G,"LISr'. 
You will be immediately struck by a 
whole new list of commands that moth- 
er Apple never told you about. These are 
ampersand (&) commands which have 
been added to implement the RDOS 
commands, and they woric as follows: 
Whenever the "«fe" is encountered, Ap- 
plesoft jumps to location $3F5. looking 
at that location will tell you where the 
ampersand evaluation routine is locat- 
ed; in this case, it contains "4C 03 B3"or 
JMP $B303. Examination of the code 



"Krakowicz'^ seventh law 
of Kracking says: When 
you're totally lost, 
bootcode trace" 



ingsays: "whenyou're totally lost, boot- 
code trace" (I know, I promise that I'll 
write a complete column on boot-trac- 
ing soon. If you just can't wait, try to get 
hold of the Hardcore magazine update 
3.1, pages 6-15. It has a lucid, well- 
exampled discussion of the boot-tracing 
process). When you load TO, SO into 
$800, you will immediately see the fa- 
miliar "Brody Loady" (named after that 
fim-loving bunch of Scandahoovians at 
Brodeibund) which moves the entire 
pagedown topage 2 and jumps to $20F 
to coriiplete the boot. This is a fairly 
tricky boot which has been used for all 
types of protection schemes, but if you 
puzzle over it long enough, you'll see 
that the JMP ($003E) at location $343 
doubles as a jump to the sector read 
routine, thra as a jump to the grogram 
start wten all the sectors are read ia The 
program start in this case is $B300, 
which is a JMP $B974 that drops you 
into a discouragingly complex series of 
JSR'sandJMP's. 

At this point, discretion is the better 
part of valor (remember the second law: 
There's always another way). What the 
boot-trace has told us is that the DOS 
code lives from $B300 to $BFFF, and is 



there reveals that the accumulator is 
compared to atableofnumbersin$B320- 
$B330, and the address of the routine to 
be executed is picked up from a table in 
$B331- $B352. You can easily see all 
this code by resetting any of the RDOS 
SSI games, and if you're really interest- 
ed, you can contact your local pirate for 
a copy of the source code listings, in Big 
Mac fonnat, for both the original and 
DOS 3.3 compatible versions of RDOS. 
The disk also contains object code for 
RDOS 3.3 and listings of the other pro- 
grams used for secondary protection 
and initializing. If there's enough inter- 
est, the sysop might be persuaded to 
include them on his Apple Trek Krack- 
ing disk #2. 

Now we 're starting to make progress. 
Each time the "&" command is encoun- 
tered, Applesoft obligingly jumps up to 
$B303 with the hex value of the next 
basic token in the accumulator, and then 
decides what to do next The tokens, 
with theirvalue, subroutine address start, 
and fimction are shown in figure 1 . 

As you can see, not all have been 
chased down. Interested parties iue in- 
vited to investigate and share the results 
with us all. 









Figure 1 
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But this, too, has only a limited value, 
since we run outof informative tokens at 
about $B679 in a listing that continues 
up to $BFFF. The only way to get there 
is to call up the infantry and slogourway 
thiougji the code, brute force. Since it's 
a DOS, there must be read and write 
code of some sort, so looking around for 
disk accesses ($C08C,X) is agood place 
to start The first encounter is at $BB6B, 
which is clearly a "write" section — 
$C08F,X = output; $C08E,X = sense 
write protect. It's followed by a read 
sectorroutine at $BBFD-BC64, and read 
address routine at $BC65-$BCC0. On 
closeexamination,itcanbe seen that the 



RWTS" (it goes into $8000 as the de- 
fault location). Next, BLOAD "RDOS 
WRITE",A$7000, then move it to the 
normal RWTS locations with B700< 
7000.78FFM (this is necessary because 
you're using the RWTS routines to read 
in the files; writing on top of operating 
code can lead to very unpleasant re- 
sults). Return to BASIC, delete line five, 
and type "RUN", answer the question 
"13 sector", enter the appropriate slots 
and drives, and you're off and running 
to create anRDOS 3.3 copy (when you're 
finished, you'll have a 16-sector dis- 
kette with only 13 sectors occupied per 
track, but you won't notice it in use). 



0, 7, E, 6, D, 5, C, 4,B, 3, A, 2, 9, 1, 
8,F. 

The second catalog sector, then, ap- 
pears to be sector 7. If you intend to do 
any amount of playing around with one 
of these disks, use the "RDOS WRITE" 
RWTS from the COPYB disk, or change 
bytes $BE2A-$BE2D to $EA's with the 
Inspector. This omits the table lookup 
and makes the sector numbers follow 
the sequence as used by RDOS. 

Next, copy the file called RDOS 3.3 
from the COPYB disk (or track of any 
of the recently unprotected SSI series) 
onto track zero, sectors 0-D. You would 



"Krakowic^'s second law of Kracking 
says: There is always another way." 



routines have been lifted almost verba- 
tim from DOS 3.2, with the address 
maricer changed to "D4 AA B7" (in 
most cases). Aha! Maybe we can sneak 
in the aH)ropriate routines from DOS 
3.3 and make it "DO D5 AA 96's?" To 
make alengthy story short, the answer is 
yes, but. DOS 3.2 uses, as you probably 
know, "6+2" nibblizing in storing data 
on the disk, while 3.3 uses "5+3". The 
end result is that the pre- and post- 
nibblizing routines must be transplant- 
ed from DOS 3.3, as well as both read 
and write byte translate tables. The ad- 
dress mariners and the size of the nibble 
buffers must also be adjusted. When this 
is done (with much wailing and gnash- 
ing of teeth), the end result is a fimction- 
al, DOS 3.3 compatible RDOS: RDOS 
3.3. 

(As abrief aside, the essential tools in 
this task are (of course). Beneath Apple 
DOS,and the DOSSOURCE comment- 
ed listing of all the DOS code). 

Now, we know from previous games 
like Crisis Mountain and Ming's Chal- 
lenge that we can read the sectors into 
memory from a disk with modified 
RWTS routines by using its own RWTS 
andthelnspector.thenswappingRWTS 
routines to standard DOS 3.3 and writ- 
ing them out again on a formatted disk. 
The prospect of doing all th^SSI games 
by hand boggles the mind, however, and 
requires an automated approach (they 
were supposed to woric for ->us<-, re- 
member?). The answer to this problem 
was the programhow known as COPYB 
- a highly modified version of COPY A 
which does the RWTS swap for you, 
and even initializes disks as a bonus. 
The version of COPYB in general circu- 
lation includes RWTS routines which 
have been modified for reading and 
writing RDC)S. Reasonable directions 
are included on the disk, so it should be 
possible to back up your own SSI disks, 
using the additional information pro- 
vided below. 

Armed with RDOS 3.3 and COPYB, 
itis now possible to begin attacking one 
of the SSI protected disks. Since RDOS 
is based on DOS 3.2, the disks are all 13- 
sector format, and since the DOS is all 
on track zero, you want to begin the 
track copying process with track one. 
To reiterate the COPYB instructions, 
run COPYB, then type Ctrl-C or reset 
when the prompt for source disk comes 
up. Get into the monitor and type 22E: 1 
to set the starting track to 1 , then, if the 
address marker bytes were IM AA B7, 
BLOAD the file called "RDOS READ 



Some af the SSI games use the nor- 
mal DOS 3.2 address maricer bytes of 
"D5 AA B5." These should be read in 
usingthe"DOS3.2RWTS"file,butyou 
still need to use the "RDOS WRITE" 
RWTS for the writing routine. 

RDOS uses track 1 for the catalog, 
and identifies files via a 24- character 
alphanumeric name, alength in "blocks" 
as in Pascal, and the location of the 
starting block on the disk: 



expect to have a woridng copy of the 
game at this point, but there are still a 
couple of surprises in store for you (I 
said it was a challenge!). There are sev- 
eral different secondary protection 
schemes used to defeat various copiers, 
usually going imder the innocuousname 
of "QWERTY". The most common of 
these reads in an address field from track 
0, delays a bit, and looks for an $EE as 
the next byte on the track. If it finds it, a 
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entire track and obliterate data on any 
adjacent half-track. After reading in the 
data, the memory values are exclusive- 
or'ed (XOR) with the address ($1000 
contains $00, $1001 contains $01, etc.), 
and if an error is found, it reboots the 
disk. Placing an RTS ($60) at the entry 
point of $AOFO will avoid the entire 
issue and make the COPYA version run. 

The final (I hope) hurdle to using 
RDOS 3.3 is the program which initial- 
izes a save game diskette in an RDOS 
compatible format It is called SSI.INIT 
and loads into $800-$AFF (it is usually 
accessed via a "call 2800" from a basic 
program). Since it only writes address 
fields, and not data sectors (with no 
verify), it is a very fast init. All that's 
necessary to generate a disk compatible 
with RDOS 3.3 is to replace the "D4 A A 
BT' (or "D5 AA B5") address marker 
byte with D5 AA 96: change bytes $8F5 
to $D5 and $8FF to $96. 

Now for the bad news: while RDOS 
is fast, primarily because all files are 
stored in sequential blocks, RDOS 3.3 is 
slow because of the sector interleave 
used by SSI (the disk must make an 
almost an entire revolution for each sec- 
tor that is read in). It is fairly easy to add 
an interleave lookup table to RDOS 3.3 
(it's called RDOS 3.3a on the disk), but 
bad things happened during my attempts 
to incorporate it into the SSI.INIT pro- 
gram. The code from $851 to $86B 
needs more alteration than I had pa- 
tience for (there's room for a patch in 
$9D7-9FF), and would be worth the 
effort if some ambitious Krackist out 
there could find the time... 

Rnally, as a typical example of Mur- 
phy's Law ("if anything can go wroiig, 
it will, and at the worst possible mo- 
^ rfteiit), ]fihat ktter doing all'ttiis md con- 
verting some 20 games, the very last one 
I tried was Germany 1985. This is a 
fairly recent publication of SSI which is 
completely writteninmachinelanguage, 
does not use RDOS at all, and will 
require a totally different approach to 
unprotection. 



The starting block is equal to the 
track number multiplied by 13 plus the 
firstblock($lA00isreally$001A, which 
is decimal 26, or track 2, sector 0). If you 
look through the catalog track with the 
Inspector, you find the beginning of the 
catalog as expected in T1,S0. Looking 
for the continuation in T 1 ,S 1 , however, 
brings you to the next surprise held by 
RDOS: There is no sector interleaving 
in software; it is all done by the sector 
number sequencing during SSI's initial- 
ize routine. The importance of sector 
interleaving is discussed in "Bag of 
Tricks", and in a Softalk article about a 
year ago by Worth and Lechner. (DOS 
uses a lookup table at $BFA8 to change 
the sector number read from the value 
read off the disk ("physical sector") to 
the number it tliinks it should be ("log- 
ical sector"). SSI uses an "ascending 7" 
interleave scheme, which means that the 
sequence of sectors on the disk, as read 
by DOS 3.3 with its hex interleave table, 
is: 



is stored in location 0, otherwise the 
disk spins forever. By changing bytes 
$28-$29 to "A9 00", this annoyance is 
removed. A similar routine, seen only 
once or twice, is called "QWERTY", 
looks for an $ AA following the address 
field on any track, and reboots if it's not 
found. The remedy here is to put "A9 
00" in bytes $20421. 

Recently, a much more sophisticated 
technique has been used (Galactic Glad- 
iators, Road to Gettysburg), which does 
the SSI equivalent of "quarter-tracking" 
or "spiralling." This version of QWER- 
TY reads in four pages of sequential 
bytes from each of the four adjacent 
half-tracks from $20.5 to $22.0, storing 
them at $1000-$1FFF. The three bytes 
following the four pages worth are used 
as the address marker for the data on the 
next half-track (as with all these protec- 
tion techniques, the "sectors" are skewed 
so that there isnever valid data overlap- 
ping on adjacent half-tracks). This ap- 
proach effectively defeats copiers like 
NA II and Locksmith, which write an 
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®I need help with the following 
softkeys: 

Risk vl.4 (issue#85,pg 19)by Alan 
Chaney. The softkey works fine but I am 
unable to transfer it to a 3.5" disk even 
though it is a ProDOS program. 

Alternate Reality-the Dungeon (is- 
sue ^2). I get an "Out of Data Error at 
310" when I try to deprotect my backup 
copy of the game. When I softkey the 
original disk, I get a grating sound in the 
disk drive then the message "Disk Drive 
Error". 

In addition, when I play this game, I 
find that when my character gets^ to a 
certain level, he keeps meeting this crea- 
ture caUed the devourer — ^there are no 
encounters with other monsters. Even if 
I use ttie^APT to create a super character 
he will be eventually worn down. Is 
there another way to deal with this crea- 
ture or is it a bug in the program? 

Champions of Kryim (issue #77) by 
Dr. Crack. In his softkey. Dr. Crack 
gives instructions to edit sectors 18 and 
19 of a particular track. My sector editor 
only goes up to 16. Is this a misprint or 
does this disk have 19 sectors per track? 
If it does, what procedure do I use to 
make the edits? 

My setup is: Apple Ilgs, ROM ver- 
sion 1, 1.25 Mbytes RAM. 
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Softkey for.. 



Outpost 
Sinus 



Just like almost every other Sirius 
disk, boot code tracing is the key to 
getting Outpost in memory. Once again, 
it is the standard Sirius boot program so 
often seen when breaking into Sirius 
disks. Seeing that Tve documented this 
procedure in other softkeys I'll skip it 
this time. 

Powerup your Apple and let's begin! 
CALL-151 
9600<C600.C6FFM 
96FA:98N9801:4C59FF 
9600G 
C0E8 

9800<800.8FFM 
9810:64 N984C:68 
985C:01N 9870:98 
987E:59FF 
9600G 
C0E8 

8400<6400.67FFM 
6463:84 
6466:85 
6469:86 
646C:87 

9810:04 N984C:08 
987D:A0 00B90064990004 
:B90065990005B900 
:67 99 00 07 C8 DO EB4C 
:4604 

The above procedure is standard for 
the other Sirius disks containing this 
same boot code. The only thing that 
usually varies in the boot code is what it 
does aiter the program is in memory. In 
this case it ends up at $520 (which is 
cunentty at $6520). There, it sets the 
stack values (which tell the RTS at $558 
where to go) and also plays around with 
the zero page. 

At$6523isaJSR$7D0whichshould 
be changed to BIT $7D0 because $7D0 
is a memory check routine that will 
cause a reboot. 
6523:2C 

It normally exits at $6558 so change 
the RTS to a JMP $7IX) and we'll write 
a routine at $7D0 to move the zero page 
to $2700 and save the stack addresses. 
6558:4CD007 

67D0:A2 00 BD 00 00 9D 00 27 
:E8D0F7688D002068 
:8D0120 4C59FF 

Call up $9600 to boot the disk and 
load the program. 
9600G 

The program is inmemory from $800 
to $8FFF and hi-res page 1 is blank. 
Checklocations $2000 and $2001 where 
we stored the entry point of the game 
program. 
2000.2001 

The values should be $FF and $7F. 
The smallest typing error along the way 
could cause these values to be incorrect 
and if so, the program will probably not 
woric correctly. 

If everything is correa, move $800- 
$lFFFto$2800. 
2800<800.1FFFM 

At $813Disa JMP $8EC0 which isa 
disk check routine. Upon a successful 
check, it returns by RTS with no check- 
sum. It can be easily disabled by putting 
anRTSat$813D. 
813D:60 

Insert a slave disk with no HELLO 
program and at least 105 available sec- 



tors, then reboot DOS and enter the 

monitor. 

C600G 

CALL-151 

A memory move routine must be 
written to move $2800 back to $800 and 
$2700 back to the zero page. Because 
the code begins at $2700 this can be 
written right before it at $26C0. 
26C0:A2 00BD00289D0008 
:E8D0F7EEC4 26EEC7 
:26ADC426C940D0EA 
:BD00 279D000OE8D0 
:F74C0080 

Finally, save the program to disk. 
We'U save $26C0 through $8DFF. Pag- 
es $8E and $8F are only for the disk 
check and do not need to be saved. 
BSAVE OUTPOST,A$26C0,L$6730 



Softkey for.. 



Twerps 
Sirius 



If Sirius software were still in busi- 
ness, I'm sure they would have begun to 
despiseme by now. Twerps is about the 
15th Sirius game I have cracked and 
many of these cracking procedures I 
have submitted (or will be submitting) 
for publication in Computist. After a 
while, cracking Sirius disks became quite 
routine because most of them are pro- 
tected the same way. However, even 
though many of them are alike, there is 
just enough variance finom diskto disk to 
make one Softkey procedure obsolete 
onthenextdistTweipsisnocxception. 

Much like Epoch, Twerps occupies a 
great amount of monory and would take 
alot of extra work to try to compact it 
into a standard DOS file. TbeiHOgram 
code runs from $400 to $BFFF and Hi- 
res page 2 is blank. The title picture 
loads from the disk separately and uses 
$2000-3FFF. You could easily save all 
of the woiking game code, sacrificing 
the picture, and have a BRUNable file of 
Twerps or if you prefer to salvage the 
picture, you could scrunch it down to 
size with a picture packer and include it 
in the file. This is the way I originally did 
it, but because not all of us have the same 
picture packer, it would be a bit more 
difficult to document 

This game will be deprotected and 
saved much in the same manner as Ep- 
och. It will involve bootcode tracing the 
disk to get the program and writing the 
code directly to the copy disk with the 
RWTS. Also, because the title picture 
normallyloadsinfrom the disk between 
games and during the demo mode, we 
will use the RAM card to store the 
picture somewhat in the same way Gor- 
gon was done. 

We will begin by creating a blank 
copy diskwittiamodifiedboot t Thisis 
so we can boot this disk without DOS 
loading over part of the game program. 
FP 

CALL-151 
B700:4C59FF 
INIT HELLO 
DELETE HELLO 

Set this disk aside and insert the Tw- 
erps disk. It's time to boot code trace 
another typical Sirius disk. Although 
the below procedure is not documented 
step by step, try to use your own knowl- 
edge and what you've learned (if you 
understand machine language) to figure 
out what each step is doing. Believe me, 
it's by far the best way to leam and 
understand how protection worics. 
9600<C600.C6FFM 



96FA:98N9801:4C59FF 

9600G 

9800<800.8FFM 

985C:01N 9870:98 

987D:A94C8D0005A9598D 

:0105A9FF8D02054C 

:4604 

9600G 

C0E8 

All of the program code is in memory 
at this point but the title picture still 
hasn't been loaded in. This is done at 
$BC03. A few modifications must be 
made to bypass a check to track $17. 
Also, we want to load the picture into 
$4000 instead of $2000 because the 
codethatruns at $400-$lFFFis at$2000 
right now. 
BC03:2090BE 
BC22:4C59FF 
BC10:40 
BC17:4C 
BC1E:54 
300:A2 60862B4C03BC 

The brief routine at $300 restores the 
slot number in location $2B before call- 
ing $BC03. Tum on the drive, execute 
$300, and tum off the drive. 
C0E9 
300G 
C0E8 

Everything we need to save is now in 
memory from $2000-$BFFF. We'll be 
using the RWTS (which occupies 
$B800-BFFF) to save this game to disk. 
Rrst, we have to move the $B000 area 
memoiy elsewhere tomakeroomforthe 
RWTS 
1000<B000.BFFFM 

At$BCOO(now$lCX)0)istheroutine 
tiiat loads tiie title picture in fifom Ae 
disk. Since we'll be storing the picture 
in the RAM card, we'll write the routine 
at $1C00 to move the picture from the 
RAM oud to the Hi-res screen. 
1C00AD 83 CO AD 83 CO A9 00 
:85D085D2A9D085D1 
:A22086D3A000B1D0 
:91D2C8D0F9E6D1E6 
:D3CAD0F2AD82C060 

At $BGA6 is a routine to move pages 
$20 to $3B down to $400. This is nor- 
mally called right before jumping to 
$400 to start the game but hasn't been 
called yet. To avoid writing an extra 
memory move routine, we will use this 
one before starting the game. Make one 
modification by patching an RTS at the 
end of the routine. 
1CC4:60 

Insert the Twerps COPY disk, boot 
the disk, and tum off the disk drive. 
C600G 
C0E8 

Because we modified the boot pro- 
gram on the copy disk, only the RWTS 
is intact at this time. The rest of DOS did 
not load. The RWTS is all we will need 
to write the game to disk as wdl as read 
it in at boot Begin by entering the nec- 
essary lOB information for writing the 
game to the disk. 
B7EB:000C0F 
B7F0:00AF000002 
B7E1:A0 
B793G 

Once the writing is finished, reboot 
DOS and run your sector editor. Then 
read track 00, sector 01. This is techni- 
cally boot stage 1 ($B700). You should 
see 4C 59 FF at the beginning of this 
sector. Beginning right at byte 00, enter 
the following program: 

Ids ai Byte Bdqqi la 

00 01 00 4C59F 2093B7A200 



V BD00B79D00 

03E8D0F7C 
1103BD0010 
9D00B0E8D0 
REE 1303 EE 
1603AD1603 
C9C0D0EA20 
A6BCAD81C0 
AD81C0AD83 
C0AD83C0BD 
00409D00D0 
E8D0F7EE38 
(BEE3B03AD 
3BO3C9P0DO 
EAAD82C0A9 
C8D0003A9 
008D0103A9 
BC8D0203AD 
50C04C0004 
$00 $01 $EB ?? 000C0FFBB7 

00AF000001 
$E1 ?? AD 

That's the JOB data for the loading of 
the game at $EB and the length (in 
pages) of the game program at $E1. 

Rewrite this sector and you're fin- 
ished. 

Softkey for... 

Snack Attack 
Datamost 

Snack Attack is written to disk with a 
modified DOS 3.2. It can be deprotected 
one of two different ways. Either by 
copying the disk track by track to nor- 
mal DOS 3.3, or boot code tracing the 
disk and saving the game as a BRUN- 
able file. Due to the memory usage of 
this game, the hi-res picture would ei- 
ther have to be packed or sacrificed to 
save the game as a file. The easiest way 
to do it in tills case is to copy the disk to 
a normal format Hiis canbe done with 
a Super lOB swap controller. If you are 
interested in saving this game as a single 
file, you can use the boot code trace 
steps for County Fair in Issue #82. Take 
note that ONLY the boot code trace 
procedure will work for Snack Attack as 
the start address and memoryoise is not 
the same as County Fair. Once the game 
is in memory, the rest will be up to you 
if you wish to try it that way. 

Otherwise, beginby formatting adisk 
for the copy. 
INIT HELLO 

Now we have to get the Snack Attack 
RWTS in memory. Boot the disk and 
after a few seconds, press RESET sever- 
al times until the prompt appears. Then, 
enter the monitor and move the RWTS 
to $1900 where Super lOB will use it. 
CALH51 
1900<B800.BFFFM 

Reboot DOS, load Super lOB and 
install the controller listed at the end of 
this article. It wUl copy tracks $gp to $1 1 
from Snack Attack to the copy disk. 
Also, all tracks except for track will be 
written with a reverse (Pascal) skew. 
This is to maximize loading speed. DOS 
3.2 reads faster when the sectors are 
read in ascending order but DOS 3.3 is 
just the opposite. If we were to make the 
copy using the normal 3.3 skew, it would 
take 20-30 seconds just to load the game. 
It is possible to change the loader to read 
in reverse order but it is much easier to 
just write with a reverse skew. 

When the Super lOB controller is 
installed, run the program and copy the 
disk. There will be a read error on track 
0, and several on track $1 1 but the pro- 
gram will ignore the errors and keep on 
copying. After the copy is finished, run 
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your sector editor. The original Snack 
Attack disk is no longer needed. 

What we need to do now is copy a 
nomal 3.3 RWTS to track $00 but save 
sector $0C which is the real boot 1 
sector of Snack Attack. Boot 1 is nor- 
mally found on track $00, sector $01 but 
Datamost used about 3 decoy boot 1 
sectors to confuse boot code tracers. 

This next step can be done one of two 
ways. You make the choice. 

1. Read track $00, sector $0C and 
write it to track $12, sector $0C for safe 
keeping. Then take a copier that allows 
you to select tracks and copy track 
from a normal (non-master) DOS disk. 
DON'T use the Apple master disk for 
this. Then, with your sector editor, read 
track $12, sector $0C and write it to 
track $00, sector $01. 

2. Individually copy sectors $00-09 
(on track 0) one at a time from a normal 
disk to the copy disk. This is much more 
tedious than the first option. Then read 
sector $0C from the Snack Attack copy 
and write it to sector $01. 

The final step of this Softkey is in- 
stalling the sector skew into the RWTS 
on the disk. Remember, when you write 
with an abnormal skew, you must read 
with the same skew so the sectors are 
read in the correct order. The skew is 
found on track $00, sector $09 at byte 
$B8. 

M Sd Bifla Baoi la 

00 09 B8 ?? 0002040608 

0A0C0E0103 
0507090B0D 
OF 

After the skew has been entered, re- 
write the sector and you're ready to play 
Snack Attack! 

CONTROLLER 

1000 REM"SNACK ATTACK 

CONTROLLER 
1010 TK = 0:ST = 0:LT « 

18:CD = WR 
1020 Tl = TK: GOSUB 490: 

GOSUB*360: ONERR GOTO 550 
1030 GOSUB 430: GOSUB 100: ST 

= ST + 1: IF ST < 13 THEN 

1030 
1040 IF BF THEN 1060 
1050 ST = 0:TK = TK + 1 : IF 

TK < LT THEN 1030 
1060 GOSUB 490 :TK = T1:ST = 

0: GOSUB 360 
1070 GOSUB 430: GOSUB 100: ST 

= ST + 1: IF ST < 13 THEN 

1070 
1080 ST = 0:TK = TK + 1: IF 

TK =1 THEN GOSUB 2000 
1085 IF BF = AND TK < LT 

THEN 1070 
1090 IF TK < LT THEN 1020 
1100 HOME : PRINT ,''D0NE" : 

END -•• 
2000 DATA 0^2^4,6/8^10,12, 

14,1,3,5,7,9,11,13,15 
2010 FOR I = 1 TO 16: READ 

SS: POKE 49079 + I,SS: 

NEXT : RETURN 

Checksums 

1000-$356B 1050-$03B0 1090-$2825 

1010-$3222 1060-$4EFF 1100-$F064 

1020-$16A9 1070-$BBBA 2000--$9E40 

1030-$E75E 1080-$9128 2010-$16F3 
1040-$OD7D 1085-$971D 



Softkey for... 

Seven Cities of Gold 

Electronic Arts 

Here is another Most Wanted List 
disk sent to me by a Computist subscrib- 



er. Seven Cities of Gold is protected 
much like most of the EOA games I am 
familiar with. Most of them contain a 
nomial or slightly altered DOS 3.3 for- 
m at with the dreaded uncopyable track 6 
which is used for a nibble count. Once 
finding the nibble count routine, I can be 
disabled. This disk appears to contain 3 
nibble count routines in different places 
but I believe that only two of them are 
used. We'll begin by copying both sides 
of the disk. 

You'll need a normal disk copier that 
bypasses read errors such as the Lock- 
smith fast disk backup. The only read 
errors will be on Track 6 of side 1 . After 
copying the disk, run your sector editor. 

It didn't take long to find the first 
nibble count routine. It is on Track $1, 
Sector $F and resides in memory at 
$A000. You would think that by just 
patching an RTS at the beginning of the 
routine, you could easily bypass it but 
EOA thought of that too. Somewhere, 
cleverly hidden in the program code is a 
memory check routine that will cause 
the program to crash if any changes are 
made. Through ttie process of trial and 
error, I concluded that it adds up all of 
the bytes in the routine and checks the 
result value. There is a way around this 
without having to find the memory check 
routine. Take the first three bytes of this 
routine which are $4C $69 $A0. Add 
them up like this: 
LDA #$4C 
CLC 

ADC #$69 
ADC #$A0 

The result is $55. To bypass the nib- 
ble count, we want to put a CLC and an 
RTS (which would be an $18 and a $60) 
at the beginning of the routine. The trick 
is changing the third byte also where the 
sum of the three new bytes will also 
equal $55. The third byte should be $DD 
($18+60+DD=$55). 

M SsL fiy!£ ElSIDl JSi 

$01 $0F $00 4C69A0 1860DD 

If you were to boot the disk rightnow, 
you would make it just past the title page 
until it checks the disk again and crash- 
es. This time, the nibble count routine is 
encoded on the disk. In a case like this, 
the best thing to do is halt the boot code 
after the program is loaded and search 
throughmemory to find the routine in its 
decoded form. I found the program start 
address at $A946 in an encoded table of 
addresses. It uses this table for a series of 
indirect jumps obviously meant to con- 
fiise the cracker. By changing this ad- 
dress to $FF59, 1 was able to enter the 
monitor and look at the program code 
once it was in memory and eventually, I 
found what I was looking for. The nib- 
ble count routine was at $6100. Know- 
ing this was encoded on the disk, I 
searched for a JSR $6100 which I found 
at $6875. Even though the actual nibble 
count routine was encoded, surprisingly 
the JMP was not. I found this on Track 
$E, Sector $7. Change the $20 to a $2C 
which will turn the JSR $6100 to a BIT 
$6100. 

li Sa fiyia Etaoi la 

$0E$07 $75 20 2C 

...and that takes care of the protection 
on Seven Cities of Gold! 

Softkey for... 

Pensate 

Penguin 

This Most Wanted List member was 
sent to me by a subscriber who had read 



my ad in the back of Computist. Pensate 
is on a standard type DOS 3.3 format but 
is a little trickier than some protection 
schemes. To begin, the address marks 
altemate between D5 AA 96 and D4 A A 
96 on even and odd tracks respectively. 
Also, the DOS routines are encoded on 
the disk making them abit more difficult 
to examine and modify. Let's begin and 
ril try to explain as we go along. 

Being that Pensate is on a mostly 
standard format, it can be copied track 
by track to a normal disk without too 
much of a problem. This can be done 
with a Super lOB controller. Begin by 
installing the controller into Super lOB 
and copying the disk. The only tracks 
containing data are $00 to $11. The 
controllerpokesinthe$D5 addressmaric 
on even tracks and the $D4 on odd 
tracks. This is done inline 1025 and line 
1065 changes it to a normal $D5 for 
writing. The rest of the controller is just 
standard procedure. 

Now, run your sector editor. We need 
to change their DOS to read the normal 
format of the copy. Their DOS is capa- 
ble of reading either a $D4 or a $D5 in 
the address field because of the way it 
was programmed. Here is an example: 
1000- LDA$C08C,X 

1003- BPL $1000 

1005- LSR 

1006- CMP#$6A 

What this is doing is reading a byte 
from the disk, performing an LSR bit 
shift (which divides the byte by two 
leaving no decimal remainder) and com- 
paring the byte to $6A. Because the LSR 



1025 DM = TK / 2 = INT (TK / 

2): POKE 47445^212 + DM 
1030 GOSUB 430: GOSUB 100: ST 

= ST + 1: IF ST < DOS THEN 

1030 
1040 IF BF THEN 1060 
1050 ST = 0:TK = TK + 1: IF 

TK < LT THEN 1025 
1060 GOSUB 490 :TK = T1:ST = 


1065 POKE 47445,213 
1070 GOSUB 430: GOSUB 100: ST 

= ST + 1: IF ST < DOS THEN 

1070 
1080 ST = 0:TK =* TK + 1 : IF 

BF = AND TK < LT THEN 

1070 
1090 IF TK < LT THEN 1020 
1100 HOME : PRINT 

^^DONE-WITH-COPY" : END 

Checksums 

1000-$356B 1040-$57FB 1080-$3D59 

1010-$3222 1050-$5A21 1090-$2807 

1020-$84E4 1060-$E809 1100-$D02C 

1025-$4755 1065-$7991 

1030-$5154 1070-$7194 

Softkey for... 

Where in the World is 
Carmen Sandiego? 

Broderbund 

There have been two other Computist 
Softkeys for this game but this Softkey 
is for later releases of the game with a 
different copy protection. 'Where in the 
World... ' appears to be the first Carmen 
Sandiego disk released by Broderbund 
and also may be the only disk of the 
series that was released prior to the birth 
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leaves no remainder, $D4 and $D5 will 
both result in a $6 A when bit-shifted 
right. Therefore, this part of the loader 
need not be modified. 

The only other difference between 
Pensate's DOS and normal DOS is that 
the end marks have been changed from 
DE A A to DA A A. By changing their 
DOS to look for the DE AA, the copy 
will work. The problem is that the DOS 
is encoded on the disk. By making a 
quick modification to the boot code, I 
was able to look at the decoded DOS and 
also find out how it was encoded. With 
the needed information at my fingertips, 
I came up with the DOS modifications 
and the encoded values for these chang- 
es. 

lili Sfl Byta Bam Isl 

$00 $0E$A6 13 17 

$A7 OA OE 

$00 $OD$OD 13 17 

$0E OA OE 

CONTROLLER 

1000 REM ^^PENSATE CONTROLLER 
1010 TK = 0:ST = 0:LT = 

18:CD = WR 
1020 Tl = TK: GOSUB 490: 

POKE 47426,24 



of Broderbund's 18 sector per track for- 
mat. The only other disk I've seen from 
this series is 'Where in the USA is 
Carmen Sandiego?' which is in the 
cursed 18 sector format. By pressing 
Reset on the game in such a way to 
freeze the text screen, you'll see a mes- 
sage at the bottom of the screen stating 
•ROLAND WAS HERE, BUT HE 
LEFT...'. As far as I know, the wizard 
who devised the 18 sector format for 
Broderbund is named Roland but the 
message confiises me because I believe 
that his disk protection was not used 
until after the release of the first Carnien 
Sandiego disk. Well, enough about de- 
tails, let's get to the Softkey! 

This disk is protected much like Cap- 
tain Goodnight which was Softkeyed in 
Computist #82. Side 1 is encoded in 4-f4 
and quarter tracked as well but fortu- 
nately, once the program is loaded in, it 
does not access side 1 again. To make 
things even easier, side 2 is unprotected. 
By copying side 2 and boot code tracing 
to get the game program from side 1 , this 
disk can be deprotected. 

To begin, label a 2 sided copy disk (or 
2 single sided disks). Using a normal 
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DOS copier, copy side 2 of Caraien 
Sandiego. Then, insert side 1 of the copy 
disk. Even though the main program is 
quite large, it can still be saved without 
having to boot code trace more than 
once. This can be accomplished by caus- 
ing the backup disk to halt the boot once 
the RWTS is in memory. 
CALH51 
B64A:4C59FF 
INIT HELLO 
DELETE HELLO 

Once this is complete, insert * Where 
in the World...' and begin boot code 
tracing the disk. This is almost the same 
identical boot code as Captain Good- 
night. 

9600<C600.C6FFM 
96FA:98 N 9801 :AD E8 CO 4C 59 FF 
9600G 

9800<800.8FFM 
9837:10 N9847:4C 59 FF 
9801G 
982D:6010 
9831:EAEA 
9837:00 
9847:60 
106A:A964 
1105:94 

9500:ADE8C04C59FF 
9600Q 
106B:04 
65E4:2C 

65ED:004CA0 06 
9500:A2 00BD00659D00 05 
:BD0066 9D0006E8D0 
:F1A260 4C0004 

The boot code is set to jump to $6A0 
once the game is loaded in. At $6A0 
(right now at $66A0) we'll write a rou- 
tine to save the lower 6 pages of memory 
as well as the $F000 RAM card area. 
66A0:A2 00BD00009D00 20 
:E8D0F7EEA406EEA7 
:06ADA406C906D0EA 
:BD00F09D0030E8D0 
:F7gEBD06EEBA06D0 
:EFAb82C04C59FF 

Execute $9600 to load in the game! 
9600G 

Before rebooting, we must save the 
code occupying the RWTS area as well 
as page $8. 
2600<B600.BFFFM 
2300<800.8FFM 

Insert the backup disk, reboot and 
tum off the disk drive and restore page 
$8. 

C600G 
C0E8 
800<2300.23FFM 

Read enable the RAM card and move 
bank 1$D000 to $5000. 
C081 C081 N F800<F800.FFFFM 
C083 
5000<D000.DFFFM 

We'll use the RWTS to write $800 
through $B5FF to tracks $01 through 
$0C. 

B7EC:0C 05 FB B7 00 B5 00 00 02 
B7E1:AE 
B793G 

And write Bank 2 $DO00-$EFFF to 
track $0D and $0E. 
C08B 

B7EC:0E0FFBB700EF 
B7E1:20 
B793G 

Next, reboot DOS and run a sector 
editor. Read track 0, sector and change 
it so it jumps to boot stage 2 instead of 
the monitor. 



Ids SI BMa EffiQ 

00 01 EB ?? 



Trk Set Byte 
$00 $00 $4B 



From 
59F 



la 

00 B7 



Read track 0, sector 1 and at byte 00, 
enter a routine to read in the game pro- 
gram. 

Idi Sa BMfe Bsm IQ 

00 01 00 r> 2093B7AD81 

C0AD81C0AD 
8BC0AD8BCX) 
A90E8DECB7 
A90F8DEDB7 
A9EF8DF1B7 
A9208DE1B7 
2093B7C00 
23 

Move the cursor to byte $EB and 
enter the lOB informatioa 

la 

000C05FBB7 
00B5000001 

...and at byte $E1, enter the number 
ofpagestoload. 

]ji Sa B^ BBm la 

00 01 El ?? AE 

Write this sector back to disk and 
read track 3, sector 3. This sector reads 
into memory at $2300. This is where we 
will write a memory move routine to 
restore all of the code into its proper 
place. Begin at byte 00. 

Idi S£l B^ Eeqi la 

03 03 00 r> A200BD0020 

9D0000E8D0 
F7EE0423EE 
0723AD0423 
C926D0EAA9 
0085008502 
A9268501A9 
- B68503A20A 
204723A9FD 
8503A21020 
4723A95085 
01A9D08503 
A210AD83C0 
2047234C00 
eOAOOOBlOO 
9102C8D0F9 
E601E603CA 
D0F2e0 

Save this sector to the disk, and if 
everything was followed correctly, you 
should now have an unprotected copy of 
* Where in the World is Carmen Sandi- 
ego?'. 

Softkey for... 

Spectre 

Datamost 

This Soflkey >yill convert Spectre into 
a copyable disk using Super lOB and a 
few sector edits...but first, a brief expla- 
nation of the disk. Tracks 0-2 are normal 
except for modified end marks of $DF 
and $AA. Tracks $3-22 have the same 
modified end maiks butthe address and 
data headers are also altered: 

HQ22M Spggtrg 

Address D5 AA 96 C5 AA B5 
Data D5AAAD C5AABD 

The disk can be copied to a normal 
format quite easily by using a custom 
made controller for Super lOB. To be- 
gin, load Super lOB and install the Spec- 
tre controller listed at the end of the 
article. Then run the program, choose 
the proper slot and drives, and format 
thecopydisk.THECOPYDISKMUST 
BEFORMATTEDWITHAVOLUME 
OF 17 or it will not work. After format- 
ting, copy the disk and then get out your 
sector editor. 

The RWTS on Track is still looking 
for the altered end marks of $DF so it 
must be changed to look for $DE. 

M Sd fiyla fiaoi la 

$00 $03 $35 DF DE 



$91 DF DE 

The altered address and data marks 
are not intact in the RWTS on the disk 
but are stored there by a routine at 
$BED7. On Track 0, Sector 8, the JMP 
$BED7 should be changed to JMP 
$9D84 which is where it goes after the 
marks are changed. 

Itk Si fi^ Bsm la 

$00 $08 $CF D7 84 

$D0 BE 9D 

Finally, we have to disable a disk 
check that is done before the title picture 
loads in. This can be found on Track 6, 
Sector $D. Oiange the JMP $35B to 
BIT $35B so it will not jump to the 
*crash' routine. 

Hs Sfl Byla flBDi la 

$06 $0D $27 20 2C 

Note that if you make copies of this 
backup, the copies must have a volume 
of 17 ($1 1 hex). Most normal disk copi- 
ers copy the volume, though, so there 
should be no problem. 

CONTROLLER 

1000 REM ^SPECTRE CONTROLLER 
1010 TK = 0:ST = 0:LT = 

35:CD = WR 
1020 Tl = TK: GOSUB 490: 

POKE 47426^24: ONERR GOTO 

550 

1025 IF TK < 3 THEN 1030 

1026 DATA 
197,170,181,197,170,189 

1027 GOSUB 180: GOSUB 200: 
RESTORE 

1030 GOSUB 430: GOSUB 100: ST 

= ST + 1: IF ST < DOS THEN 

1030 
1040 IF BF THEN 1060 
1050 ST = 0:TK = TK + 1 : IF 

TK < LT THEN 1025 
1060 GOSUB 490: GOSUB 220 :TK 

= T1:ST = 
1070 GOSUB 430: GOSUB 100: ST 

= ST + 1: IF ST < DOS THEN 

1070 
1080 ST = 0:TK « TK + 1 : IF 

BF « AND TK < LT THEN 

1070 
1090 IF TK < LT THEN 1020 
1100 HOME : PRINT ''DONE." : 

END 

Checksums 

1000-$356B 1027-$5BCB 1070-$CA81 

1010~$3266 1030^$4DCA 1080-$28C8 

1020-$1CF0 1040-$07BD 1090-$D7CE 

1025-$5898 1050-$0627 1100-$1ABF 

1026-$4611 1060-$C284 

Softkey for... 

Superkey 
Bytes of Learning 

Of all the disks I've had sent to me 
through my ad in the back of Computist, 
three of them were from a Canadian 
educational software publishing com- 
pany called Bytes of Leaming. Their 
disk protection was more difficult to 
remove than alot of disks that I've seen. 
The disk •SUPERKEY' was sent to me 
by two different readers from Canada. 
Take note that there may be different 
releases of this program that the Softkey 
might not work on. 

Bytes of Leaming seems to be quite 
consistent with their protection meth- 
ods from disk to disk. They don't neces- 
sarily use the same exact protection but 
the methods are similar. Even though 
SuperKey can be read by COPYA if you 
ignore epilog and checksum errors, what 
it is reading is nothing close to the actual 



disk data. The Bytes of Leaming com- 
pany uses a different type of disk encod- 
ing than normal DOS 3.3 does even 
though the disk is in a 3.3 format. After 
finding the address epilogs (DE A A) the 
read address routine reads two addition- 
al bytes that are used in the postnibble 
routine to decode the sector from the 
raw disk data. The read translate table is 
also abnormal. The best way to copy the 
disk is to do a swap copy. Super lOB can 
be used for this procedure. 

To start with, we need to get our 
hands on SuperKey's DOS. It can be 
found on track 0, but most of it is encod- 
ed. Instead of walking through the de- 
code routines one at a time, we'll just 
copy track (the only normal track on 
the disk) and halt the boot process at a 
point where the DOS has been decoded. 
Format a backup disk and then, using 
any copier that can copy individual 
tracks, copy track 0. 

Now, run your sector editor and edit 
the copy disk. 

Hi at Byla EBm la 

$00 $05 $88 2000BE C59F 

Write this sector back and then boot 
the disk. 
PR#6 

The DOS is now in memory in decod- 
ed form. Make a few modifications so it 
will work with the swap copy and then 
move it to the location where it will be 
used by Super lOB. 
BC09:B8 
BC0C:B9 
BC10:B9 
BC19:EAEA 
BC52:B9 
BC63:B8 
BFFD:4C00BE 
1900<B800.BFFFM 

Insert a slave disk with no *hello' 
program and reboot. Then enter the 
monitor. 
C600G 
CALL-151 

Because SuperKey's RWTS entry 
point is $BE(X) as opposed to the normal 
$BD(X), we'll have to woikmodify some 
part of the RWTS or the Super lOB 
program. In the RWTS, some of the 
code at the end of the $BF(X) page is not 
needed for RWTS use. We can put a 
JMP $BIXX) at $BFFD in the normal 
RWTS and a JMP $BEOO at $BFFD in 
SuperKey's RWTS. Then change $3D9 
to JMP $BFFD instead of $B7B5. 
BFFD:4C00BD 
20FD:4C00BE 
3DA:FDBF 

Load Super lOB and install the Su- 
perKey Controller. Thenproceed to copy 
the SuperKey disk. When finished, run 
your sector editor. 

Idi Set fi^ Etom la 

$00 $05 $88 4C59F 2000BE 
$0C$12 56EB50E8 F9FEFFC 
$0F $3E 16726D 66D03B 

There is only one thing left to do now. 
Replace the read translate table with a 
normal one. Because it is encoded, it 
must first be read into memory, decod- 
ed, replaced, re-encoded, and finally 
written back to the disk. 
B7E1:01 read sector 

B7EB:0000 0D 
B7F0:00 6D0000 01 
B793G 
6000:A2 6A8A5D956D4900 decodel 

encode routine 
:9D956DCAD0F460 
6000G decode 

6D96<BA96.BAFFM replace 
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6000G encode 

B7E1:01 write sector 

B7EC:000D 

B7F0:00 6D000002 

B793G 

...and you're finished! 

CONTROLLER 

1000 REM ^^SUPERKEY 

CONTROLLER 
1010 TK = 1:ST = 0:LT = 

34:CD = WR 
1020 Tl = TK: GOSUB 490: 

GOSUB 360: ONERR GOTO 550 
1030 GOSUB 430: GOSUB 100:ST 

= ST + 1 : IF ST < DOS THEN 

1030 
1040 IF BF THEN 1060 
1050 ST = 0:TK = TK + 1: IF 

TK =17 THEN 1050 
1055 IF TK < LT THEN 1030 
1060 GOSUB 490 :TK = T1:ST = 

0: GOSUB 360 
1070 GOSUB 430: GOSUB 100: ST 

= ST + 1: IF ST < DOS THEN 

1070 
1080 ST = 0:TK = TK + 1: IF 

TK = 17 THEN 1080 
1085 IF BF = AND TK < LT 

THEN 1070 
1090 IF TK < LT THEN 1020 
1100 HOME : PRINT ^^DONE." : 

END 

Checksums 

1000-$356B 1050-$36DB 1085-$722E 

1010-$6145 1055-$EFAF 1090-$iDCC 

1020-$4124 1060-$BC34 1100-$D421 

1030-$5725 1070-$B431 

1040-$EB16 1080-$121D 



James J. Harvey 



MI 



Softkey for... 

TEAM Series 

People and Places 
Science and Health 

Making Choices 

General Interest 

Davidson Associates (1990) 

Requirements: 

disk copier that ignores em)rs 
disk editor with search command 

The *TEAM Series" is a four disk 
Reading Comprehension program that 
is appropriate for Junior High and High 
School students. 

The total program contains over a 
thousand reading passages and compre- 
hension questions. 

The readings cover a wide range of 
subjects and may be used in any order. 
"People and Places*' - These readings 
covermen and women who have shaped 
history plus important historical events 
and locations. 

"Science and Health" - This disk cov- 
ers questions that deal with science and 
health, demonstrates cause-and-effect 
relationships, sequencing of events, and 
technical vocabulary. 

"Making Choices" - These selections 
deal with issues facing young people 
today such as methods for handing con- 
flict, managing money , and reducing 
stress. 

"General Interest" - These reading 
passages focus on humor, mystery, and 
adventure. 

Each program is on a 3.5" disk and 
naturally each disk in the series contains 
copy protectioa Here is the procedure 
to make an unprotected copy of each 
disk. 



Boot Copy II Plus 9.1 (or any later 
version that will copy 3.5" disks). 

Straight copy (disk with format) each 
of the four original disks. Ignore the 
read error on Block 0308. 

For each of the four disks: 

Scan for 20 C8 OA FO D9 
Change to 20 C8 OA EA EA 

Bytes were found as follows but may 
be in a different location on other ver- 
sions: 

People and Places 

fiBs Byia Bam la 

031D 076 20G80AFDD9 20C80AEAEA 
General Interest 

Bjh Byia jSoDi la 

031E 076 20C80AFDD9 20C80AEAEA 

Making Choices 

BBS S^ BsEH Ifi 

0032 076 20C80AFDD9 20C80AEAEA 

Science and Health 

B!!i Eyla From la 

0032 076 20C80AF0D9 20C80AEAEA 

Write the changes back to each disk. 

Softkey for... 

The Botanist's Apprentice 
National Geographic Society 

Project Classify: Plants: 

Disk I -Side I & II 

"Desert, Forest, and Wetland" 

Disk II -Side I & II 

"Farmland, Grassland, and Town" 

Softkey for... 

Journey to the 

Age of the Dinosaurs 

National Geographic Society 

Project Qassify: Dinosaurs: 

Disk I -Side I & II 
"North America" 
Disk II -Side I & II 
"Europe and Asia" 

Softkey for... 

The Field Zoologist 
National Geographic Society 

Project Qassify: Mammals: 

Disk I -Side I & II 
Mammals I 
Disk II -Side I & II 
MammalsII 

The following will woik for all three 
of the above programs: 

Disk I and Disk II are copy protected 
on Side I. Side II of each disk is not 
protected. 

1. Format two blank disks (for each of 
the above programs that you wish to 
copy) in ProDOS using Copy II Plus 
and copy a fresh PRODOS file onto 
side I of each disk. Set these disks 
aside for now. 

2. Boot a DOS 3.3 disk and use COPYA 
to copy the disk. 

POKE 47426,24 Ignore Errors 

RUN COPYA 

3. Copy Side I of each original disk. 
Copy all of the files, except PRO- 
DOS, from your copy onto the Pro- 
DOS formatted disks that you made 
before. 

4. Rename these disks the same as the 
original. 

5. Straight copy side II of each original 
disk onto Side II of your ProDOS 
copies. 



MECC 5.25" disk softkeys 

Softkey for... 

Vacation Nation Travel {5.25") 

Grammar Gazette (5.25") 

Time Navigator Around the 

Worid (5.25") 
Estimation Activities (5.25") 

Woolly Bounce (5.25") 

Cleanwater Detectives (5.25") 

Paper Plane Pilot (5.25") 

The Living Cell (5.25") 

Blue Grass Bluff (5.25") 

Littletown Zoo (5.25") 

Problem Solving With Nim 

(5.25") 

MECC 

All of these MECC programs are on 
5.25" disks. Here are the instructions 
and the location of the bytes to change 
for deprotecting these programs. 

1 . Boot Copy II Plus and format a blank 
disk in ProDOS (One disk for each 
program): 

2. Copy a fresh PRODOS file to each 
disk and set them aside: 

3. Boot a DOS 3.3 disk and use COPYA 
to make copies. 

RUN COPYA 

Ctrl-reset at the prompts 

70 

POKE 47426,24 

POKE 48584,71 

RUN 

4. Make the sector edits. 

5. After a disk is copied and sector 
edited; copy all of tfie files (except 
PRODOS) fi-om thissectorediteddisk 
onto your formatted ProDOS disk that 
contains a fresh PRODOS file. 

6. Rename each disk the same as the 
original. , 

7.ForaU5.25" MECCdisks, scanfor90 
034CXXXX 60 and change to 18EA 
EAEAEA60. 

8. Now make the correct edit for the disk 
you are copying. 

Vacation Nation Travel 



Tfk Set Bvte 


From la 


05 09 /\6 


9003CDA 18EAEAEA 




8960 EA60 


Grammar Gazette 


M sn m. 


From To 


05 09 8D 


90034C77 18EAEAEA 




9160 EA60 


07 OA 84 


90034C52 18EAEAEA 




0360 EA60 



Time Navigator Around, 
the World 

Idi sa Eyi£ Bsm la 

05 09 8D 90034C4B 18EAEAEA 

7560 EA60 

07 OA 98 90034C52 18EAEAEA 

0360 EA60 

Estimation Activities 

lili Sa fiiia Enffli la 

01 09 8D 90034C86 18EAEAEA 

8D60 EA60 

03 OA 9A 90034C52 18EAEAEA 



Cleanwater Detectives 

Idi Sa Bid£ Em. la 

01 09 66 90034eAE 18EAEAEA 

8960 EA60 

03 OB 28 90034C52 18EAEAEA 

0360 EA60 

Paper Plane Pilot 

M sa fi^ £Bm Is. 

05 09 8D 90034CD2 18EAEAEA 

8660 EA60 

07 OA 98 90034C52 18EAEAEA 

0360 EA60 

The Living Cell 

idi sa 3^ EBffli la 

01 09 66 90034002 18EAEAEA 

8260 EA60 

07 OC A4 90034C52 18EAEAEA 

0360 EA60 

Problem Solving With Nim 

Idi Sa B^ Bam la 

01 09 8D 90034C17 18EAEAEA 

8060 EA60 

03 OA 84 90034C52 18EAEAEA 

0360 EA60 

Blue Grass Bluff 

Idi sa Eyia Bm la 

01 09 66 90034CA1 18EAEAEA 

7F60 EA60 

03 OA A4 90034C52 18EAEAEA 

0360 EA60 

Littletovm Zoo 

Idi sa fiyla Baoi la 

05 09 A6 90034C71 18EAEAEA 
8A60 EA60 

MECC 3.5" disk softkeys 

Softkey for... 
Vacation Nation Travel (3^") 
Estimation Activities (3.5") 

The Living Cell (3.5") 

Problem Solving With Nim 

(3.5") 

Woolly Bounce (3.5") 

Time Navigator Around the 

World (3.5") 

Grammar Monsters (3.5") 

Cleanwater Detectives (3.5") 

Paper Plane Pilot (3.5") 

Littletown Zoo (3.5") 

Bluegrass Bluff (3.5") 

Grammar Gazette (3.5") 

MECC 

A new series of MECC programs, 
that are ProDOS based and are on 3.5" 
and 5.25" disks, have been made avail- 
able to me. These were released in the 
latter part of 1991. Here are the sector 
edits to bypass the protection for the 
3.5" disks. 

1. Copy each disk using Copy II Plus 
and ignore the error on Blk 0308. 

2. Make the appropriate block edit. Don *t 
forget to write the changes back to 
each disk as you sector edit them. 

3. Rename each disk the same as the 
original. 

Vacation Nation Travel 
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0360 EAeO 


mi 


Bvte 


From To 


Woolly Bounce 


002D 


0A6 


90034CDA 18EAEAEA 
8960 EA60 


Idi aa Byte From la 

05 07 66 90034CA2 18EAEAEA 




Estimation Activities 


91 60 EAeO 


B!!i 


Bvis 


From la 


17 02 84 90034C52 18EAEAEA 


oooc 


08D 


90034C86 18EAEAEA 


_ 0360 EA60 






8060 EAeO 


1 Exchange 


0018 


19A 


90034C52 18EAEAEA 
0360 EA60 
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The Living CeU 



St 

oooc 



066 



003B 1M 



From 

90034C02 

8260 

90034052 

0360 



18EAEAEA 

EAeo 

18EAEAEA 
EA60 



The Living Cell 



oooc 



08D 



001B 184 



From 

90034C17 

8060 

90034C52 

0360 



la. 

18EAEAEA 

EAeo 

18EAEAEA 
EA60 



Woolly Bounce 

002O 066 90034CA2 18EAEAEA 

9160 EA60 

OOBF 184 9003C52 18EAEAEA 

0360 EA60 

Time Navigator Around the 
World 



St 


Byte 


From 


la. 


002C 


OBD 


90034C4B 


18EAEAEA 






7560 


EA60 


naiB 


198 


90 03 4C 52 


18EAEAEA 






0360 


EA60 • 




Grammar Monsters 


St 


Bvie 


From 


la. 


0082 


om 


90034C7B 


18EAEAEA 






9260 


EAeo 


OOCA 


184 


90034C52 


18EAEAEA 






0360 


EA60 




Cleanwater Detectives 


St 


Byte 


Fron^ 


la 


002C 


006 


9003CAE 


18EAEAEA 






8960 


EA60 


C03B 


0?8 


90034C52 


18EAEAEA 






0360 


EA60 




Paper Plane Pilot 


m. 


Bvte 


From 


ia 


002C 


08D 


g0034CD2 


18EAEAEA 






8660 


EAeo 


003B 


198 


90034C52 


18EAEAEA 






0360 


EA60 




Littletown Zoo 


St 


Byte 


From 


la 


002C 


0A6 


90034C71 


18EAEAEA 






8A60 


EA60 




Bluegrass Bluff 


St 


Bvte 


From 


la 


oooc 


066 


90034CA1 


18EAEAEA 






7F60 


EAeo 


001B 


1A4 


90034C52 


18EAEAEA 






0360 


EAeo 




Grammar Gazette 


St 


Byte 


From 


la 


002C 


OflD 


90 03 4C 77 


18EAEAEA 






9160 


EA60 


003B 


184 


90 03 4C 52 


18EAEAEA 






0360 


EA60 


Rodney W Peterson 



® I deprotected Shanghai so That I 
could put it on my hard drive but it 
doesn't beep at the three second level 
when playing "Challange". Try it and 
you will see what I mean. Is there a fix 
that corrects this? 

Are there any deprotects for MECC 
programs? These are mainly education- 
al programs. 

One last thing, do you have an ad- 
dress for Brian A. Tnoha? I have written 
to him recently but have not received a 
reply. 

It's for sure that you are not a 
regular subscriber. Softkeys for 
MECC software are a regular fix- 
ture at Computist What program 



are you trying to backup ? There are 
too many titles for me to just send 
you everything. I haven't heard from 
Brian in some time. He's no doubt 
busy with his own affairs. Maybe 
he'll read this and drop us a line. 
RDEXed 



Jack Nissel 



PA 



Bug in 
PSAT/S AT Analogies 

Bug in 
SAT Word Attack Skills 

Bug in 
PSAT Word Attack Skills 

In issue 63 the controller for PSAT/ 
SAT Analogies, SAT Word Attack 
Skills, and PSAT Word Attack Skills. 
Line 10010 should be: 

10010 IF PEEK(6400)<>162 
THEN PRINT CHR$(4) ^^BLOAD 
RWTS.PSAT WORD ATTACK 
SKILLS, A$1900" 

Bug in Matchmaker World 

Geography Facts 

In issue 62 the controller for Match- 
maker World Geography Facts Line 
10010 should be: 

10010 IF PEEK(6400)<>162 
THEN PRINT CHR$ (4) "BLOAD 
RWTS .MATCHMAKER WGF, 
A$1900" 

Bug in Algebra vol 3 & 4 

In issue 63 the contipller for Algebra 
Volume 3 & 4. Line 10010 should be: 

10010 IF^ PEEK (6400) 4>162 
THEN PRINT CHR$ ( 4 ) "BLOAD 
RWTS .ALGEBRA, $1900" 

Tm sorry if these errors caused any- 
one problems. 

Softkeyfor... 

Fact or Opinion: 
Smart Shopper Blue Level 

Fact or Opinion: 

Smart Shopper Red Level 

Cause & EfTect: 

Mountain Climbing Blue Level 

Drawing Conclusions: 
Chief of Detectives Red Level 

Drawing Conclusions: 

Chief of Detectives Blue Level 

Reading for Detail: 

Race Track Blue Level 

Getting the Main Idea: 

Around the World Blue Level 

Learning Well 

Requirements: 

The original disk(s) 

A blank initialized disk for each title 

A blank initialized slave disk 

Super lOBv 1.5 

A way to reset into the monitor 

These titles can be deprotected by 
using Super lOB with the Swap Con- 
troller. Use the RWTS of the protected 
disk to read the original disk tiien use a 
normal RWTS to write the information 
back to your blank disk. 

1. INTTialize your blank disk(s) 
INIT HELLO 

DELETE HELLO 

2. Boot your original disk and at the 
Applesoft prompt reset into the mon- 
itor. 



3. Move the RWTS to a safe place by 
entering: 

1900<B800.BFFFM 

4. Put in your slave disk and boot it by 
entering: 

C600G 

5. Afterthe disk boots and the Applesoft 
prompt appears insert your Super lOB 
disk and save the RWTS to it by enter- 
ing: 

BSAVE RWTS.LEARNING WELL, 
A$1900,L$800 

6. Install lie controller into Super lOB, 
run it and copy your originsd disk to 
your blank disk. Answer NO when 
asked if you want to INITialize the 
blank disk. 

CONTROLLER 

1000 REM LEARNING WELL 
1010 TK = 3:ST = 0:LT = 

35:CD = WR 
1020 Tr = TK: GOSUB 490: 

GOSUB 360: ONERR GOTO 550 
1030 GOSUB 430: GOSUB 100: ST 

= ST -H 1: IF ST < DOS THEN 

1030 
1040 IF BF THEN 1060 
1050 ST « 0:TK « TK + 1 : IF 

TK < LT THEN 1030 
1060 GOSUB 490 :TK = T1:ST « 

0: GOSUB 360 
1070 GOSUB 430: GOSUB 100: ST 

= ST + 1: IF ST < DOS THEN 

1070 
1080 ST = 0:TK = TK + 1: IF 

BF = AND TK < LT THEN 

1070 
1090 IF TK < LT THEN 1020 
1100 HOME : PRINT "^DONE" : 

END 
10010 IF PEEK (6400) < > 162 

then print chr$ (4) ^'bload 
Orwts .learjIingOwell^ 

A$1900'' 

Checksums 

1000-$356B 1040-$6342 1080-$6CA2 

1010-$3565 1050~$ABA3 1090-$9DCA 

1020-$6170 1060-$20C0 1100-$C97D 

1030-$7771 1070-$28C5 10010-$2E37 

Softkey for... 

Reading for Detail: 

Race Track Red Level 

Sequence: 

What Comes First Red Level 

Sequence: 
What Comes First Blue Level 

Getting the Main Idea: 

Around the World Red Level 

Inference: 

School Days Red Level 

Inference: 

School Days Blue Level 

FoUowing Directions: 

Behind the Wheel Red Level 

Context Clues: 

Hidden Treasure Red Level 

Learning Well 

Requirements: 

The original disk(s) 
A blank disk for each title 
DOS 3.3 system disk 
Any sector editor 

All of these titles can be deprotected 
in the following manner. 

1 . Boot your DOS 3.3 system master and 
at the ] prompt enter: 

POKE 47426,24 ignore checksum and 

epilogs 
RUNCOPYA 

2. Copy your original disk to your blank 
disk. 



3. Make the following sector edit to your 
disk. 

m Set M Oqqi Ifi 

00 03 42 38 18 

4. Write the sector back to the disk. 



BBS 
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Gate, Space Fox, and HoverBlade are 
all available from LRO Computer Sales 
at 1-800-869-9152. The prices are $45, 
$49, and $29 respectively. The best of 
the three by far is GATE - nice graphics, 
some good puzzles, and a number of 
surprises. The first two were produced 
by the Toolbox folks in France; they 
also produced Sensei GS, a karate game 
that is pretty cool (nice graphics, sound 
and animation), but it will reportedly 
not be released due to the weak GS 
software maricet. It is only to be found 
on "iUicif • BBS's (whatever those are). 
Meanwhile, Secret of Bharas has just 
been released by Victory Software, the 
people who did 2088:Cryllan Mission I 
& 2. It reportedly has similar graphics to 
CM2, and is played similarly. 



BBS 



#181 



©Does anyone have a crack for the 
5.25 version of Children's Writing and 
Publishing Centerfor the Apple? I could 
really use some help on that one! 

©Does anyone know if there is any 
way to get Apple Ilgs programs, that 
apparently run onROM 1 only, to run on 
a ROM 3 machine? 

I would like to thank Jack Moravetz 
for all his help. It's great to know that 
there are those among us who are able 
and willing to help out. Thanks Jack! 

Here's my address if you can help me 
with the above questions. (I don't get on 
this board too often.) 

Ron Powers 
1607 Skeels Ave. 
Eau Qaire, WI 54701 
(715)834-8676 



BBS 



#61 



©I have Skate or Die for the Ilgs, 
using the old ROM version 1 . It doesn't 
woric with the version 3 ROMs. When I 
called Electronic Arts and informed them 
of this problem, they said, *They couldn't 
help me, and that they are not going to 
release a new version to accommodate 
the new ROM version 3." Is there any 
way to rewrite the code so it could be 
used on the new ROM version 3? 



BBS 



#19 



Softkeyfor... 

Superstar Ice Hockey 

? 

• 

After someone telling me that the 
softkey I presented for Superstar Ice 
Hockey was, in not so many words, 
ridiculous, I looked for other ways of 
deprotection. Since I don't own the pro- 
gram, this was tricky, but a sofflcey 
originally ai^ared in issue 7 1 . For those 
who don 't have that issue but would still 
like to play the game without the manual 
checks, here is the softkey as it ap- 
peared. The credit for this one goes to 
Brian Troha and Stephen Lau. 

Bi!i B^ EEm la 

$9 $5F 20A31A ADA31A 
$B $4 0013 EAEA 

$0 DOOB EAEA 
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D500 


D400 


D012 


8038 


D0 12 


8036 



$C . $11A 
$38 $B7 
$A6 $B7 

I would like to take this opportunity 
to thank Mr. Troha, Mr. Lau, and all the 
others who took th§ time to explain how 
and why they did certain things while 
deprotecting. It helped me (and I'm sure 
others) a lot. 

Jack Moravetz 

Softkey for... 

Skills Bank n 

? 

• 

Skills Bank II is an educational pack- 
age containing teacher disks, class record 
disks, student disks, and various levels 
of lesson disks. When the lesson disks 
are copied, the student disk accessing 
them will say that it is a copy and quit* 
The protection is on the student disk in 
a file called TUA.OVR. Using a block 
or sector editor (I use Glen Bredon's 
Block Warden) to follow the file 
TUA.OVR, search for the bytes $20 41 
77 and replace the $20 with $60 and 
. write the block back to the disk. It is in 
the file at least twice. You need to place 
the $60 at the first occurrence. 



Tim Furry 



Notes on 

Test Drive II cars disks 

I just ran across this today. If you 
want to have only one data disk for your 
cars (supercars and musclecars), here's 
what to do: Copy all of your car files 
from one disk to the other (i.e. from 
muscle cars to super cars or vice versa). 
Boot up a source code editor (such as 
ORCA/M) and edit the file "CARS 
.DAT* so that it includes the following: 

CAMA Camaro_ZL-l 
DODG Dodge_Charger 
GOATPontiac_GTO 
GT50 Mustang^GTSOO 
STNG Corvette^Stingray 

That's all there is to it! 
Unknown 

IBM Softkey for... 

The Faery Tale 

A really easy doc check, it can be 
bypassed in many ways. I put the alter- 
ations as deep as possible to avoid any 
possible complications. The protection 
is in FTC.EXE and FTE.EXE which are 
the CGA and EGA versions. 

For Norton users, search FTC.EXE 
and FTE.EXE f6r the byte pattern 85 CO 
74239Aandchangethe7423toEB2E. 

DEBUGmethod.DEBUGis assumed 
to be in the current path or directory. 
First the CGA version. 
REN FTCEXE FTC.ZAP 
DEBUG FTC.ZAP 
E352FEB2E 

W to save it 

Q to quit to DOS 

REN FTC.ZAP FTCEXE 

Now for the EGA versioa 
RENFTEEXEFTE2AP 
DEBUG FTE.ZAP 
E3625EB2E 

W to save it 

Q to quit 

RENFTE2APFTEEXE 



Okay, that*s it. Just hit return when 
asked for the words from the map. 

IBM Softkey for... 

Gauntlet! 

9 

Use Norton to search the GPROG. 
EXEfileforB4 IC (offset should be hex 
7E51). Change B4 IC CD21 8A 07 3C 
F8 75 to9090E8EF01 31 COEB 04. 
Search for: 02 B8 (offset should be hex 
8045). Change 02B8003FCD21 7207 
Al to OE IF BB EF FF B8 11 00 A3. 
Search for 03 06 (offset shouldbe 8050) 
and change to 89 IE. 

IBM Softkey for... 

Grave Yardage 

Activision 

Use PCtools or other program and 
edit GY.EXE. Go to sector 72, offset 
373 and change 9 A 34 1 1 to E9 90 00. 
That's it! 

IBM Softkey for... 

Gun Boat 

Accolade 

Use Norton and search file GB.EXE 
(141,333 03-09-90 l:12p) for 75 03 E9 
8A (shouldbe at offset 27FFH). Change 
75 03 to 90 90. Now, when you're asked 
to enter an answer, hit any number and 
the RETURN key. 

IBM Softkey for... 

Astrilis 
Shaman Games 

Use debug to load astrilis.com 
DEBUG ASTRIUaCOM 
E79D1 

X)(XX:79D1 75.EB 
E79EB 

)00(X:79EB 75.90 F2.90 
W 

That's all there is to it If you find that 
the address doesn't match then search 
for3AE075 114F and change to 3AE0 
EB114F. 

3AE0 CMPAH^M 

7511 JNZ 79E4 ;changesJNZtoJMP 

4F DEC Dl 

Search for3C4D75F2BF0001 and 
change to 3C4D9090BF0001. 

3C4D CMP AMD 

75F2 JNZ 79DF ;changesJNZtoNOP 

BF0001 MOV DI.0100 

IBM Softkey for... 

Ancient Art of War 
Broderbund 

1. Make a copy of the original distribu- 
tion diskette using the DISKCOPY 
command. Put your original away, 
and woik on the copy. Stejw 2 through 
6 assume that a disk containing 
DEBUG.COM is in drive A: and your 
woiking WAR disk is in drive B: 

2. From the A> prompt, type: 
RENAME B:WAR.EXEWAR.SAV 

Followed by, of course, hitting tte 
Return key. 

3. Now, start up DEBUG with: 
DEBUG B:WAR.SAV 

4. From the *-' DEBUG prompt, enter: 
E8BD8 

xxxx:8BD8CD-F8 13-90 73-EB 

The *xxxx' will vary for your system, 
but if everything from the colon (:) on- 
ward doesn't look the same, DONT 
continue — either you have another 
version, or something is wrong. 



DEBUG will display: xxxx:8BD8 
CD-. Enter TS', and hit the space bar. 
DEBUG will display: 13- Enter *90', 
and hit the space bar. DEBUG will dis- 
play: 73- Enter 'EB', and hit the space 
bar, and then Return. 

5. Now, from the '-V DEBUG prompt, 
enter * W , and hit the Return key. This 
will write the file back to disk. 

6. Enter *Q' to leave DEBUG, and from 
the A> prompt, enter. 

RENAME B:WAR.SAV WAR.EXE 

Your woricing copy of WAR will 
now run, and can, itself, be backed up 
using the DOS DISKCOPY or COPY 
commands. 

iVore.if you use WAR onafixed disk, 
you will not be able to save a game in 
progress, due to a small bug — WAR 
tests the default disk for the presence of 
a file named ''M*', instead of the selected 
data disk, the intent being to prevent 
saving a game on the same disk as that 
file. To disable this test, after complet- 
ing step 4, patch the following location: 
E3B1D 
xxxx:3B1D OB-31 

Replaces the 'OB' with •3r. This will 
allow you to save a game on a floppy 
disk in the A: drive; Note, however, that 
this removes a small maigin of safety (if 
you save a new campaign and a game to 
the same disk, the game reloader will get 
confused). 

IBM Softkey for... 

Aardvark McGraw-Hill 

Financial Software 

JRE 

This information is provided to allow 
legalowners to liberate themselves from 
the dq)^]dence on a single floppy dis- 
kette. 

Caution: It is highly recommended 
that you use this protection scheme on a 
backup copy of your software, in case 
you have a problem. Under no circum- 
stance should you use this routine on an 
original floppy. I did the routine on a 
copy created by Quaid Software *s 
"Copyright" (A program I highly sug- 
gest you purchase.) 

Using the below patches, you will be 
able to make unlimited backups of the 
floppy, but more importanfly, be able to 
boot the entire system off a hard disk. 

The copy protection method used cm 
this program expects an unusually for- 
matted Track 7. The easiest way around 
this was to bypass the entire •Verify 
Track T'routhie. 

I assume that you are familiar with 
DEBUG (found on the 2nd DOS dis- 
kette). Eveiything displayed below in 
upper-case will be supplied by the com- 
puter, you must type everything that is 
in lower-case. Note that the *-* is DE- 
BUG's prompt and should not be typed. 
Place the program diskette in Drive A, 
and Debug m Drive B. The following 
example applies to *Estate Tax Planner* 
but tt^ same theory seems to apply to all 
in the series. 

A> b:debug esti Enter Debug 

-r CS Get CSfrom debug (always 

different) 
CS XXXX Add 1000 to the number 

returned by DEBUG. This becomes 

yyyy- 

: Example: CS 2502, + 1000 = 3502 

(yyyy) 

-syyyy:0ffffe8a0755 Use above 
calculatedyyyy in this line. 



YYYY:CF3D If DEBUG does not return 
this number, add another 1000 and 
retry. 

-e yyyy:cf3d 90 90 90 90 90 Tell pro- 
gram to skip copy prot. routine. 

-w Save the program with the changes. 

Writing lEOOO bytes DEBUG 
displays this message. 

-q ExitDEBUG 

That's It Use *COPY A:*.* B:' to 
move all files to a formatted diskette and 
you will have the whole system unpro- 
tected and copyable. 

If you are like me, and you follow the 
abovedirections verbatim, you willnever 
succeed in unprotecting the AARD- 
VARKsoftware.Inthe step above where 
you are waiting for the computer to 
return CF3D, it docs NOT have to be 
CF3D. On my software, it was some- 
thing totaUy different So...the proper 
step, in my case, was to take the value 
returned: YYYY:CF3D <or whatever 
value appeared>, and type: 
-eyyyy:CF3D (or whatever value 

appeared above) Put 90 90 90 90 

90 in place of what the program 

tells you above. 

IBM Softkey for... 

ATI Training Software 
JRE 

This information is provided to allow 
legal owners of the above software to 
liberate themselves from tfaedependence 
of a single floppy diskette. 

Using the below patches, you will be 
able to make unlimited backups of the 
floppy, but more importanfly, be able to 
boot the entire system ofTahard disk. 

The copy protection method used on 
fliis program expects an unusuaUy for- 
matted Track 2. The easiest way around 
this was to patch the •Verify Track* 
routine. 

When you run the unprotected copy 
of Chart Master, you will get an error 
message. You can ignore this an just 
press <ENTER>. I'm sure that this can 
be bypassed also, but after tunning the 
program, I was disappointed and decid- 
ed not to spend any more time debug- 
ging it If you can eliminate this short- 
coming, feel free to modify this routine. 
Please send changes to ComputistRDEX 
editor. 

I assume that you are familiar with 
DEBUG (found on the 2nd DOS dis- 
kette). Everything displayed below in 
upper-gase wiU be supplied by the com- 
puter; you must type everything that is 
in lower-case. Note that the *-' is DE- 
BUG's prompt and should not be typed. 
Make a copy of the file *ATI.EXE'; 
never woric with you only copy. Place 
the program diskette in Drive A, and 
Debug in Drive B. 
A> ren atLexe ati Debug can* t save cm 

EXE file 
A> brdebug atl Enter Debug 

-S fffO 81 eO ff 00 89 86 Search for the 

routine to be patched. 
YYYY:21 AF DEBUG should return this 

number. If not, you have a different 

vers & should quit. 
-e 21 af 697900 Eliminate Flqppy 

Verify routine. 
-^ Save the program with the changes. 
Writing 6800 bytes 
-q ExitDEBUG 

A> ren ati ati-exe REName the file to 

if s original name 

That's It Use •COPY A:*.* B:' to 
move allfilestoaformatted diskette and 
you wiU have the whole system unpro* 
tected and copyable. 
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unClassifleds 

How to place an 
Unclassified Ad 

Send a typed sample copy with appropriate 
instructions. (If possible, send text on a 5.25" 
Apple format disk.) Use up to 40 characters per 
line, we will adjust word wrap. 

Special Graphics Instructions: The first 
three words of the first line are printed in bold for 
free. If you want other words bolded, use 5 
characters less per line. Use 10 characters less per 
line if you have a lot of uppercase bold letters. 
Bold letters are wider than normal. If the typed 
copy does not show bold, circle the words you 
waiU bolded and, on the side, write BOLD. If you 
want aline centered, write CENTER next to that 
line. There is no charge for centering any Hne. 

You must check your ad for errors, the first 
time it runs. Errors on our part will be corrected, 
then, for free. Errors or changes on your part will 
be charged a $5 processing fee. 

***:*r New Rates (per line) **** 

Computist club member 250 

All others 350 

The minimum order is $5. 

• Our liability for errors or omissions is limited to 

the cost of the ad 

• We reserve the right to refuse any^ad. 

• Washington state residents add 7.8% sales tax. 

• Send a check or money order (funds drawn on 

US bank only) for the entire amount to: 

COMPUTIST unCLASSIFlEDS 

33821 East Orville Road 

Eatonville^WA 98328 



WANTED 

^^Most Wanted Lisf' 
Software 

Need help to deprotect a disk 

Softkey hobbist is interested in acquiring 
copy protected softwiKe to deprc^eet Good 
track record, many successful attempts. 
Original disk will be returned along with 
softkey for COMPUTIST. Especially 
interested in older software (pre- 1988) but 
will give any disk a shot. Tm especially 
interested in: 



Wanted! Information 

on Cracking IBM protection. Also software 
likeCopywrite,LocksmithPC,CentralPoint 
Software's PC Option board and PC Watch. 
Also send list of Apple n items for sale. 

JoeTorzewski 

51625 Chestnut Road 

Granger IN 46530 



Drol- 
Serpentine- 
Spare Change- 
Wings of Fury- 
Star Cruiser - 
Space Eggs - 
Falcons- 
Microwave- 



-Broderbund 

-Broderbund 

-Broderbund 

-Broderbund 

-Sinus 

-Sirius 

-Picadilly 

-Cavali^ 



RDEX Contributors 

Vince Andrews 7 

BBS #181 ...........21 

BBS #19 ....21 

BBS #30 ....21 

BBS #61 21 

Brian Coombs •.... 16 

Rich Etarip .17,21 

Tim Furry ....22 

James J. Harvey 20 

Jeff Hurlburt 4 

Krakowicz 15 

Jack Moravetz... .,.22 

Unknown 22 



System: Apple He, 128K. Send disk to: 

Rich Etarip 

824 William Charles, Apt #2 

Green Bay, WI 54304 

Lode Runner Fun Club 

1900 optional Lode Runner screens avail- 
able for exchange with youroriginal screens. 
Toshikazi Yamamoto 
#706 Minami-Ikebukuro-Jutaku 
1-13-21 Minami-Ikebukuro, Toshima 
Tokyo 171 Japan 

Help! Looking for 

a working copy of Eureka & The Graph- 
ics and Sounds Development System 
from the book "Eureka" by Timothy 
Knight published by Baen Computer 
Books. Also seeking a copy of Super- 
works (Applewoiks for IBM). 

CK Bevan 

PO Box 941072 

Atlanta GA 30341-0072 



Apple Most Wanted 

63Alcon Taito 

74 Algebra Shop Scholastic 

63 Alien Mind.... PBI Software 

73 American History Explorer Series 

Mindscape 

75 Anchorman Virginia Reel 

74 Animals of the Past Focus Media 

72 Ankh Datamost 

73 Ant Farm Sunburst 

67 Aquatron Sierra 

63 Bad Street Brawler ....Mindscape 

73 Bank Street Beginner's RIer ..Sunburst 

73 Bank Street School Filer Sunburst 

63 Beyond Zork Infocom 

65 Bilestoad Datamost 

69 Blue Powder - Grey Smoke Grade 

74 Birds - Trees & Rowers Focus Media 

63 Border Zone Infocom 

67 Bouncing Kamungas Penguin 

66 Boxing — ? 

65 Bureaucracy Infocom 

67 C'est La Vie Adventure International 

69 Caverns of Callisto Origin 

69 Checker .....Odesta 

69 Chess 7.0... Odesta 

81 Chessmaster 2100 lie ..Software Toolworks 

75 Clue Master Detective Leisure Genius 

63 Cosmic Relief Datasoft 

65 Crime & Punishment..... Imagic 

81 Crosscountry USA School Edition. Didatech 

69 Crossword Magic v4.0 ? 

69 Cybernation NexaCorp. 

74 Decimal Dungeon.. ...Unicorn 

74 Decisions Decisions: Colonization vl .0 

Tom Snyder Productions 

69 Delta Squadron NexaCorp. 

67 Desecration Mind Games 

66 Disk Optimizer System Nitfble Notch 

65 Dondra , Spectmm Holobyte 

69 Dragon Eye Epyx 

69 Dueling Digits Broderbund 

68 D&D-Master Assistant vol2 SSI 

62 DROL Broderbund 

74 Exploring Tables & Graphs Level 2 (SU) 

Weekly Reader 

67 Evolutton Sydney 



67 Falcons Piccadilly 

68 Factastics Trivia Daystar 

75 Rnal Frontier ...Softsmith 

73 Rsher's Cove Tom Snyder Productions 

69 Fit Wars ..% Sirius 

74 Fraction Action Unicorn 

69 Gemstone Healer SSI 

73 Geometric Supposer (the) ..Sunburst 

66 GEOS Beridey Softwori(s 

63 Gladiator Taito 

73 Goodell Diamond Caper 

Tom Snyder Productions 

66 GradeBuster 1 23.. ...Grade Buster 

61 Gutenberg Sr Micromation LTD. 

65 Halls of Montezuma..... Electronic Arts 

67 High Orbit Softsmith 

67 Horizon V.... Softsmith 

75 Hunt for Red October GS .Datasoft 

69 Impossible Mission Epyx 

62 Indoor Sports Mindscape 

68 Infocomics Infocom 

66 Jane ? 

63 Joker Poker Mindscape 

72 Kabul Spy Sirius 

68 Kingdom of Facts 

Santa Barbara/Thunder Mountain 
75 Kobayashi Alternative (The) 

Simon & Schuster 

72 Lane Mastodon Infocom 

67 Lancaster SVS 

72 Laser Force (llgs) ..Britannica 

81 Last Ninja, The (He) Activiston 

75 LA Land Monopoly Softsmith 

66 Legacy of the Ancients... Electronic Arts 

65 Lost Tomb .............Datasoft 

81 M-ss-ing L-nks: Classics ok) & new 

Sunburst 

74 Mammals - Reptiles & Amphibians 

.Focus Media 

65 Manhunter New York llgs Sierra On Line 

65 Mavis Beacon Teaches Typing (gs) 

Software Toolworks 

73 McGraw-Hill Problem-Solving Lvl 5&6 

Tom Snyder Productions 

67 Microwave Cavalier 

73 Mind Castle I MCE Inc. 

63 Modem MGR MGR Software 

68 Mr. Pixel's Cartoon Kit... Mindscape 

73 Mystery of Hotel Victoria 

Tom Snyder Productions 

63 National lnspirer...Tom Snyder Productions 

75 Neptune. Softsmith 

66 Observatory (The) Mindscape 

74 Ocean Life Focus Media 

66 Odin Odessta 

63 Operation Wolf , Taito 

69 Phanlasie II SSI 

67 Phantoms 5 Sirius 

67 Pig Pen , Datamost 

74 Plants & Animals of the DesertFocus Media 

75 Prince of Persia (5.25") Broderbund 

67 Project: Space Stafion Avantage 

75 Promethean Prophecy (The) 

Simon & Schuster 

67 Pulsar II Sirius 

68 Pure Stat Basketball ? 

62 Quadratic Equations II 

...Olympus Educational Software 
81 Quarter Mile lie... ? 

68 Rails West SSI 

63 Renegade Taito 

67 Rescue Raiders..... Sir Tech 

63 Rocket Ranger (llgs) Cinemaware 

69 Roundabout Datamost 

75 Russki Duck ....Softsmith 

63 S.D.I. (llgs) Cinemaware 



62 Sea Stalker Broderbund 

67 Serpentine Broderbund 

63 Sky Shari< Taito 

63 Sound Song & Vision ...Advanced Software 

67 Space Ari< Datamost 

62 Spare Change Broderbund 

62 Speedy Spides Readers Digest 

67 Star Cruiser Sirius 

63 StickyBear Math: Add & Subtract 

Optimum Resources 

68 Stickybear GS Versions 3.5 Xerox 

67 Succession Pk^cadilly 

61 Superstar Indoor Sports..... Mindscape 

74 Surveys Unlimited Mindscape 

68 Talking Text Writer GS Scholastic 

68 Tangled Tales Origin Systems 

69 Tetris (He) ...Spectrum Holobyte 

72 Theatre Europe PBI 

74 The Other Side v2.0 

Tom Snyder Productions 

81 Think Qutek! vl .2 Learning Company 

65 Thunder Chopper ? 

63 Ticket to Washington D.C. 

Blue Lion Software 

74 Time Explorers Gameco 

74 Time Liner vl.1 ....Tom Snyder Productions 

68 Tomahawk (llgs) .Datasoft 

69 Track Attack. Broderbund 

68 Triad Thunder Mountain 

72 Triango (llgs) California Dreams 

68 Trinity Infocom 

73 Unkx)rn 5.25" software Unicom 

73 Vincent's Museum Tom Snyder Productions 
68 Vok^anoes v1.8 .Earthvy^re Comp. Services 

66 War in the MkJdIe Eartti Melbourne 

63 Wings of Fury ....Broderbund 

63 Wizardry:Retumof Werda Sir-Tech. 

65 Works (ttie) Rrst Star Software 

67 Zenitii ...Softsmith 

IBM Most Wanted 

84 Ace of Aces Accolade 

84 Bar Games .....Accolade 

84 Cotony Mindscape 

84 Don't Go Alone Accolade 

75 Empire Intersil 

84 Rnal Orbit Innerprise 

72 GBA Champtonship Football 

Electronic Arts 

68 Graphitti George Best Phillips Academy 

63 Herosof ttie Lance SSI 

84 Hardball II Accolade 

84 Hamiony Accolade 

84 Hat Trick Capcom 

84 Ishklo Accolade 

84 Jetfighter Velocity 

84 John Elwa/s Quarterback 

Melbourne House 

84 Ml Tank Platoon.. Microprose 

84 Monty Python's Rying Circus 

Mastertronic 

72 Operation Wolf Taito 

84 Outrun Sega 

84 Phantasm Exocet 

86 Pirates! Microprose 

84 Powerdrome Electronic Arts 

72 Radio Baseball Electronic Arts 

84 Sim City Maxis 

84 Stormovik Electronic Arts 

86 Sword of the Samurai Microprose 

84 Test Drive III: The Passion ..Accolade 

84 Third Courier Accolade 

84 Troika Paragon 

84 Wayne Gretzky Hockey 2 Bettiesda 

84 Worid's Greatest Baseball Game 

Epyx/Keypunch 
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#79«'niePioductMonitof&7ik6y5';Kab- 
ul Spy Softkeys: ABM* Algebra 1-6* 
Cause and Effect* Chemistry: Series !• 
Computer Generated Mathematics Vol. 
2* Cribbage* Designer Puzzles* Dun- 
geon Master Assistant Vol. 2* Econom- 
ics* Genesis* Gin King* Go* Graphmas- 
ter* Hard Hat Mack* Hi Res Computer 
Golf* Integer Arcade*^ Laser Bounce* 
Mammals Reptiles and Insects* Master 
Grades* Mickey's Crossword Puzzle 
Maker* Mind Benders* Missing Links* 
Non-Western Cultures* RoboCOP* Sa- 
fari Search* SAT Score Improvement 
Series* Special Product and Algebraic 
Factors* Stickybear GS Talking series 
Talking Alphabet* Talking Opposites* 
Talking Shapes* Task Force* Teacher's 
Toolkit version 3. 1 * The Great Knowl- 
edge Race* The History of Europe* The 
Solar System* The Time Tunnel* Thief * 
TrianGO* US History* Wasteland* 
Water and Weather* Who Am I?* Word 
Problems for Algebra* Woricsheet Gen- 
erator* Writing Chemical Fonnulas* 
Your Body* Your Body: Series II*P/ay- 
mg ripj: BanefulTales*Elite* Af acFea- 
tures: Mac Hard DiskEjectionFix* Mac 
Softkeys and other Patches: ABCBase* 
Animation Toolkitl* Aztec C 1.0* Az- 
tec C version 1.00c* Championship 
Boxing* Chart* Checkminder* Cut- 
throats* Cutthroats alternate* Deja Vu* 
Desk Toppers* Dollars & Sense* Dol- 
lars & Sense alternate* Electric Check- 
book* Excel* Excel alternate fix* Fact 
Finder 1.0* Factfinder* Farenheit 451* 
Feathers & Space* File* FileMaker* Fi- 
levision* Filevision alternate* Forecast* 
Frogger* FunPak* Gato* Grid Wars* 
Griffin Terminal* Haba-Comm* Haba- 
Comm alternate* HabaCheckMinder* 
Habadex 1.1* Harrier Strike Mission* 
Hayden Speller* Hayden Speller alter- 
nate* HiRxy^C Level 1* Hitchhiker's 
alternate* Hitchhiker's Guide to the 
Galaxy* Home Accountant* Legacy* 
Lode Runner* Mac Fortran* Macattack* 
MacChkrs/Rvrsi* MacCommand* Mac- 
Draft 1 .0* MacDraft 1.1* MacGammon/ 
Cribbage* MacJack/Poker II* MacLa- 
beller* MacMatch* MacPascal (version 
1.0)* MacPoker* MacType* Master 
Type* Master Type alternate* Mouse 
Stampede* Multiplan alternate* Multip- 



lan version 1.02*OverVue*PageMaker* 
PageMaker 1.0* Pensate*PFS*PFS File/ 
Report* PFS version A.03* Real Poker* 
Rogue* Sargon III* SkyFox* Smooth 
Talker* The Quest* Think Tank* Thirfc- 
Tank 1.1* ThinkTank 128* ThinkTank 
512* Transylvania*TriplePlay 1.0* Triv- 
ia Arcade* Trivia Fever* Typing In- 
trigue* Ultima ][* Ultima III* Vide- 
oWorics 1.0* WellTris* Winter Games* 
Xyphus* Features, Notes & such: 
COPY A-able Questran II* How to make 
Thief into a BRUNable file* How to run 
Task Force on your hard drive* Making 
Genesis into a single BRUNable file* 
Making Hard Hat Mack into a single 
BRUNable file* Making PLATO soft- 
ware run on the Enhanced //e* Multi- 
Column Print Utility (MCP)* Notes on 
Batfle Chess* Notes on Silent Service 
GS* Notes on Wildcard II card* Object 
Module Format (OMF)* ORCA/Disas- 
sembler Scripts* ORCA/Disassembler 
utilities* Other Notes* Running Teach- 
er's Toolkit v3. 1 (3.5") on a Laser 128* 
Task Force on a hard drive and Wings 
by Vitesse*TheBasicsof Kracking (part 
5): Deprotectionof Modified DOS disks* 
The Basics of Kracking Part 6: Mating 
Zone & Nibblizing Mysteries* Update 
on theSilent Service GS v925.01 crack* 
Xtemal Commands for BASIC: CWD 
(Change Woridng Directory)* ONLINE* 
#80* The Product Monitor* Features, 
Notes & such: Add Copy II Plus file 
handling to your BASIC program* Com- 
ments on the Beginner's Book* Format- 
ting 720K disks as 1.44M HD* How to 
SAVE hexdumps as CDA*s* Logging 
ProDOS Drives* The Basics of Krack- 
ing (part 7)* The Basics of Kracking 
(part SyBitkeys: Black Magic* Guild of 
Thieves* Gunslinger* King's Quest Se- 
ries* Leisure Suit Larry* Man Hunter: 
New Yoric* Police Quest* Realms of 
Darkness* Saracen* Sierra Boot Disks* 
Silicon Dreams* Space Quest Series* 
Ultima V* Wizardry Series* Xyphus* 
Softkeys: Ancient Art of War* Battle 
Chess* Bridge 6.0* Captain Blood GS* 
Dinosaur Days vl.O* Empire* Fahren- 
heit 451* Fay's Won! Rally* GATO 
vl.3* Greeting Card Maker* Hostage* 
Keef The Thief* Magic Spells v2.0* 
Magic Spells v2. 1 * Mickey 's Crossword 



Puzzle Maker* Monsters and Make Be- 
lieve vl.l* Pipe Dream* Pipe Dreams* 
Rear Guard* Rendezvous with Rama* 
Same or Different* Teacher's Tool Kit* 
Teacher's Tool Kit (lie)* War of the 
Lance* Where in the USA is Carmen 
Sandiego?* ^^^dwalkerGS* WindwaUc- 
er He* APTs: Space Rogue* Wizardry 
III* Playing Tips: Countdown* Space 
Rogue* IBM Softkeys: Serve and Vol- 
ley* Welltris 

#81* The Product Monitor* Bitkeys: 
Micro Typewriter* Softkeys: Backyard 
Birds* Balance of Power* Chemistry: 
Balancing Equations* Chemistry: The 
Periodic Table* Chuck Yeager's AFT* 
EquationMath* Estimation: Quick Solve 
I* Estimation: Quick Solve II* Five-Star 
Forecast* Fossil Hunter* Grammar Toy 



Shop* Instant Survey* Micro Typewrit- 
er v4.0* Murphy's Minerals* Patterns* 
Picture Chompers* Probability Lab* Pro- 
fessor Al's Sequencing Lab* Stickybear 
Shapes (ProDOS 1.5)* Studymate (the 
grade booster)* Sun and Seasons* The 
Duel: Test Drive II* Time Navigator* 
Tomahawk* Windwalker*i4Prjr; Where 
in Europe is Carmen Sandiego?* Where 
in the USA is Carmen Sandiego?* Where 
in the World is Carmen Sandiego?* 
Where in Time is Carmen Sandiego?* 
Playing Tips: Windwalker* IBM Soft- 
keys: Crime Wave* Gauntlet II* Stunt 
Driver* Thexder II* Wing Commander* 
IBM Reader Review: Copyright* 
and much more. . . 
For a complete back issue list, send a 
750 stamp to Computist. 



Free Software 

(while they last— only two copies left) 

These software packages are NEW (shrink-wrapped except for 
the one copy of Sound Master that I opened in order to find out 
what it was). They're software packages that someone ordered 
and then canceled and we were unable to return. 

SoundQuest CZ Master 

Sound Quest In 
(For Commodore Amiga) 




Foruse wifflfIRe GSTiotZ-IOl/CZ-l^ 
other compatable synthesizers. Included are file management and 
bank editing features, patch mixing and random voice generation 
features. Compose and mix your own music using many of the 
package options available. 

Send order to Computist at the address listed on the 
Back issue order form below. 
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Some disks apply to more than one issue and are 
shown as taller boxes. 

i^ Limited supply — first-come^first-serve basis. 
O Out-of-print — only "Zeroxed" copies for sale. 
* Issue 66 is laser printed on 8 V2 by 1 1 paper. 
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Back Issue Order Form 
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Back Issue and Library Disk Rates 



US, Canada All 

Quantity & Mexico others 

Back issues 5 or less $4.75 $8.75 

6to9 $3.75 $6.00 

10 or more $3.00 $5.00 

Zox back issues* ... any qty. $4.75 $8.75 

Library disks 5 or less $5.50 $7.50 

6 to 9 $4.00 $6.00 

10 or more $3.00 $5.00 



Note: Total back issue and library disk orders to get 
quantity discounts, (ie, ordering 5 back issues and 5 
library disks means that you pay the the quantity 10 price 
of $3 each for both.) 

*Due to the time and effort involved in making Zox 
copies, their price will remain at $4.75 each for US, 
Canada & Mexico and at $8.75 for all other Foreign. 

Shipping is included in all the prices shown. 

What's a library disk? 

A library disk is a 5V4 inch .floppy diskette that 
contains programs that would normally have to be typed 
in by the user. Documentation for each library disk can 
be found in the corresponding issue. 

•Library disks are available for all issues of COM- 
PUTIST. 

For a complete back issue list, send a 75 ^ stamp to 
Computist. 



Number of back issues. 



Number of Zox back issues. $. 

Number of library Disks. $ . 

Washington state residents add 7.8% tax $ . 

Total enclosed $_ 
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• US funds drawn on US bank. • Most orders shipped within 5 working days, 
however please allow up to 4 weeks delivery for some orders. • Large orders are 
shipped UPS so please use a street address. • Offer good while supply lasts. • Call 
(206) 832-3055 to use a credit card or send check/money order to: 

COMPUTIST 33821 E Orville Road Eatonville WA 98328 
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